How Do I send data from Mainframes to Splunk

[sunraka]

I need to extract particular set of records from DB2 table and pass it on to splunk. Splunk should accept that data and make it available for end user. The data will be sent from mainframes on batch mode and its not live data that's been passed to splunk.

[CurtisGannaway]

Hi @sunraka

Did you find what you were looking for?

If you need to get mainframe data (security, database, CICS, FTP, TCPIP, master console messages and much more), please see dgtechllc.com/meas. Our Mainframe Event Acquisition System (MEAS) product will allow you to monitor, filter and forward - in real time - any/all events from the mainframe that you would like to see in Splunk. It takes roughly 1/2 day to install and no IPL necessary. Please let me know if this solutions would be of use to you. 

Thank you!

[dinesh_cemad]

Check this app: https://splunkbase.splunk.com/app/1868/

[mirkoneverstops]

Use Splunk DB Connect app: https://splunkbase.splunk.com/app/2686/ .
Additional info about how to install a custom driver: http://docs.splunk.com/Documentation/DBX/2.4.0/DeployDBX/Installdatabasedrivers

[richgalloway]

We struggled with this recently and didn't come up with a good answer. Regrettably, there is no forwarder for mainframes. If you can, you may want to write a program that reads the DB2 table and sends the data to Splunk HTTP Event Collector.