Splunk Search

Why is our log data from Domino unreadable?

wbfoxii
Communicator

Our administrator is trying to forward data from \Lotus\Domino\Data\IBM_TECHNICAL_SUPPORT\console.log using the Universal Forwarder on a Windows-based Domino server. Instead of nice log data like:

[0C10:001B-0844] 09/27/2011 12:01:16 PM SMTP Server: 163.243.48.184 disconnected. 0 message[s] received

[0BC4:000D-0E90] 09/27/2011 12:01:17 PM Router: Message 0057FF05 transferred to gmail-smtp-in.l.google.COM for bcassill@gmail.com via SMTP

[0BC4:0029-0FB4] 09/27/2011 12:01:17 PM Router: Transferred 1 messages to GMAIL.COM (host gmail-smtp-in.l.google.COM) via SMTP

We get:
\x00\x5\x00\x4\x00\xFF\x2\x1\x00

\xBD\x00\x00\x18\x009\x008\x005\x003\x002\x00/\x00\x16\x00\x13\x00

\x16\x3\x00\x00D\x1\x00\x00@\x3\x00N\x81\xEAB\x11=R\xFFP\x88\x3\xFB\x9D\xF6Ha]\xF9\x18\xAA\xFAlIm\xF8>K&b\xA6

\x00\x5\x00\x4\x00\xFF\x2\x1\x00

Has anyone else seen this?

Tags (1)
0 Karma

dantimola
Communicator

Same problem here

0 Karma

wbfoxii
Communicator

We got out of the Domino business in the meantime. Sorry I'm no help.

0 Karma

awjohnson
Explorer

Would you be willing to share your Domino transforms? I've just started on Domino integration.

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...