Solved: Can Splunk Ingest This? - Splunk Community

Getting Data In

Hi, can Splunk ingest .edb (Exchange Database) files?

1 Solution

Solution

You can create a monitor input on this file on forwarder and check if data is indexed or not.

[monitor:///tmp/*.edb]
sourcetype = test_data

Search query: index=main sourcetype = test_data

View solution in original post

Solution

You can create a monitor input on this file on forwarder and check if data is indexed or not.

[monitor:///tmp/*.edb]
sourcetype = test_data

Search query: index=main sourcetype = test_data

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

AI + Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence ...