Monitoring Splunk
Provide Splunk Cloud feedback in this confidential UX survey by June 17
for a chance to win a $200 Amazon gift card!

not able to read SAP ABAP and JAVA audit logs in Splunk

chaitali_1994
Engager

I am trying to read the audit logs in Splunk from SAP ABAP and JAVA.
1. The audit logs are in binary
2. I am able to read other logs from the file path except the audit logs
3. I have tried with NO_CHECK_BINARY= true in props.conf during input time, but no luck
4. The logs are sent via Universal Forwarder installed in the SAP instance(where the audit logs are stored), I am able to read the logs stored in the file path. Only audit logs are not read.

Please suggest how we can read the SAP ABAP and JAVA audit logs in splunk without "SAP PowerConnect for Splunk"

Note: I am using Splunk v.7.2.5.1

Thanks in advance!

Labels (1)
0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!