Getting Data In

How to feed propriety format machine data to splunk

harshal_chakran
Builder

Hi Team,

I have logs from some Network Propriety tools, which can be opened in the tools specified by that specific vendor only. The tool doesn't provide me to convert into txt or any other readable format. Also I do not have options to stream the data over TCP/UPD.

Can you suggest me how to deal with this? because when this data is directly feeded to splunk, it shows only junk characters.

Tags (4)
0 Karma
1 Solution

MuS
Legend

Hi harshal_chakranarayan,

this is no Splunk problem, but a problem on How do I get this data out of this program in human readable format ..... the best way to do this, consult the software's documentation or ask the vendor.

If you manage to get around this, it simple to add it into Splunk either by monitoring the output or using some scripted inputs or what ever your preferred method is.

cheers, MuS

View solution in original post

MuS
Legend

Hi harshal_chakranarayan,

this is no Splunk problem, but a problem on How do I get this data out of this program in human readable format ..... the best way to do this, consult the software's documentation or ask the vendor.

If you manage to get around this, it simple to add it into Splunk either by monitoring the output or using some scripted inputs or what ever your preferred method is.

cheers, MuS

yuwtennis
Communicator

Are there any API's for this product? Or if its installed in regular OS , then perhaps
monitor syslog or eventlog?

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...