I have tried putting the following in the props.conf file:
NO_BINARY_CHECK = true
and
NO_BINARY_CHECK = 1
and
CHARSET=AUTO
But none of these worked. I did them in the props.conf file. But when I look at the splunkd.log file, the Splunk still thinks of the file as binary. How can I fix this?
I think that your understanding of NO_BINARY_CHECK is incorrect. If you set that to true, then Splunk will process a file with binary data. It doesn't change the data to readable text. From the docs:
NO_BINARY_CHECK = <boolean> * When set to true, Splunk software processes binary files. * Can only be used on the basis of [<sourcetype>], or [source::<source>], not [host::<host>]. * Default: false (binary files are ignored). * This setting applies at input time, when data is first read by Splunk software, such as on a forwarder that has configured inputs acquiring the data.