HI, I want to monitor fedora Server's (Version 21) logs into Splunk Enterprise. I already tried to monitor logs from path /var/log/journal which are in binary form and also made changes in props.conf, inputs.conf, and outputs.conf as follows: props.conf [syslog] NO_BINARY_CHECK = true inputs.conf [monitor:///var/log/journal] sourcetype = syslog outputs.conf [tcpout] defaultGroup = default-autolb-group [tcpout:default-autolb-group] server = Host:port [tcpout-server://host:port] But I am getting junk values raw event. There are couple of workarounds like using journalctl and rsyslog we can redirect logs in text like formats and monitor them. But my requirement is to monitor the jounald binary itself as monitoring binary is supported in Splunk. Any suggestions how can I monitor the binary in Splunk? Thanks, Chandni ... View more