I have successfully installed Splunk forwarders on 105 PCs and 7 LINUX machines. I cannot get any data from my unix machines Sun OS SPARC. I installed the SPARC forwarder 4.3. I keep getting errors in the splunkd.log file "Ignoring file 'filename' due to: binary". I am needing to read audit files and they are all binary. Does anyone have any experiance with this situation??
Splunk won't read binary data, presuming the data is actually Binary. If that is the case, you'll need to do something outside of Splunk to convert the binary data to text format, and then have Splunk read the text formatted files.
Splunk won't read binary data, presuming the data is actually Binary. If that is the case, you'll need to do something outside of Splunk to convert the binary data to text format, and then have Splunk read the text formatted files.
