Splunk Search

Why is our log data from Domino unreadable?

wbfoxii
Communicator

Our administrator is trying to forward data from \Lotus\Domino\Data\IBM_TECHNICAL_SUPPORT\console.log using the Universal Forwarder on a Windows-based Domino server. Instead of nice log data like:

[0C10:001B-0844] 09/27/2011 12:01:16 PM SMTP Server: 163.243.48.184 disconnected. 0 message[s] received

[0BC4:000D-0E90] 09/27/2011 12:01:17 PM Router: Message 0057FF05 transferred to gmail-smtp-in.l.google.COM for bcassill@gmail.com via SMTP

[0BC4:0029-0FB4] 09/27/2011 12:01:17 PM Router: Transferred 1 messages to GMAIL.COM (host gmail-smtp-in.l.google.COM) via SMTP

We get:
\x00\x5\x00\x4\x00\xFF\x2\x1\x00

\xBD\x00\x00\x18\x009\x008\x005\x003\x002\x00/\x00\x16\x00\x13\x00

\x16\x3\x00\x00D\x1\x00\x00@\x3\x00N\x81\xEAB\x11=R\xFFP\x88\x3\xFB\x9D\xF6Ha]\xF9\x18\xAA\xFAlIm\xF8>K&b\xA6

\x00\x5\x00\x4\x00\xFF\x2\x1\x00

Has anyone else seen this?

Tags (1)
0 Karma

dantimola
Communicator

Same problem here

0 Karma

wbfoxii
Communicator

We got out of the Domino business in the meantime. Sorry I'm no help.

0 Karma

awjohnson
Explorer

Would you be willing to share your Domino transforms? I've just started on Domino integration.

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...