Hi @msatish
I’m not familiar with the MOVEit product however I think I found their logging documentation which suggests that this is a windows based service from a company called Progress?
If so it looks like the logs are written to the file system at C:\Program Files\MOVEit\Logs however this may vary depending upon the install location.
if this is the case then the best way to onboard these logs will be using a Splunk universal forwarder (UF) configured to monitor the relevant log location and send to your Splunk Cloud stack using the UF forwarding app which you can download from your stack which contains the relevant configuration to send the data.
One you are receiving the data you should verify the relevant props configs to ensure time and event parsing are optimum.
if I have got completely the wrong end of the stick then please provide a link to the product/Vendor that you are using and I will do some more investigation
🌟 Did this answer help you? If so, please consider:
- Adding karma to show it was useful
- Marking it as the solution if it resolved your issue
- Commenting if you need any clarification
Your feedback encourages the volunteers in this community to continue contributing.
