Deployment Architecture

Not receiving anything from UNIX forwarder

fzyqkl
New Member

I have successfully installed Splunk forwarders on 105 PCs and 7 LINUX machines. I cannot get any data from my unix machines Sun OS SPARC. I installed the SPARC forwarder 4.3. I keep getting errors in the splunkd.log file "Ignoring file 'filename' due to: binary". I am needing to read audit files and they are all binary. Does anyone have any experiance with this situation??

Tags (1)
0 Karma
1 Solution

jbsplunk
Splunk Employee
Splunk Employee

Splunk won't read binary data, presuming the data is actually Binary. If that is the case, you'll need to do something outside of Splunk to convert the binary data to text format, and then have Splunk read the text formatted files.

View solution in original post

jbsplunk
Splunk Employee
Splunk Employee

Splunk won't read binary data, presuming the data is actually Binary. If that is the case, you'll need to do something outside of Splunk to convert the binary data to text format, and then have Splunk read the text formatted files.

View solution in original post

Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.