Monitor Server Transaction Log File (.ldf) on Splunk

[nerdyboy99]

How can I monitor data from .lfd files on Splunk? 

[venkatasri]

Hi, if .ldf is a text file format then you can install a Splunk Universal forwarder on the host where file exist and configure it to ingest to Splunk Enterprise.

-----------------------------------------------------------

An upvote would be appreciated if it helps!

[nerdyboy99]

Thanks for your answer. But .ldf not text file format. it's binary.

[venkatasri]

Hi,

There is no straight approach as Splunk prefers text and you can force it to ingest binary that doesn't really help with search. Instead a pre processed binary to text via a separate process or scripted input by Splunk which again back by  a custom script which user has to write for binary conversion. Following link would direct to such solutions.

https://community.splunk.com/t5/Archive/How-to-use-splunk-for-binary-log-file/m-p/41784

____________________________

An upvote would be appreciated if it helps!