We want to write an program to gather logging information from our HP NonStop system log files, both OSS and Guardian, and send them to a Splunk instance. Is this documented? We must use sockets to do this.
You don't really need anything other than to send plain text to a TCP port, and put line breaks (or some other configurable sequence) between lines. Put fields in the lines as "name=value" pairs. Set Splunk indexers to monitor the port. That's pretty much it.
Are these log files available as text files? You could monitor them directly from a forwarder and have them sent directly to a Splunk indexer. You mentioned writing a program to gather the information. You may want to create a scripted input to query the logs if they are not lying around on disk ready to be consumed. You can run the scripted input from a forwarder and have it sent to an indexer.
