Getting Data In

Need to know the Splunk Readable Formats

kiranpanchavati
New Member

Hello , We are planning to injest data from arcsight logs to splunk. So we need to convert the data to splunk in readable format. So what is the procedure ?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Short answer: if it's text then Splunk can read it.

Splunk does not read non-text data so there is no set procedure for doing so.  There are several apps available at apps.splunk.com for ingesting ArcSight data.  Perhaps one of them will help you.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...