Getting Data In

My server logs data in Korean. How do I change the language to English in Splunk indexer?

benazir
Explorer

Hi,
Currently i have a server logging Windows Event Log data in Korean. I need to change that Korean to English when i see it in Splunk indexers.

I added the Korean UTF code to the props.conf but it's still not working.

Can anyone help me on this?

0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

If Windows is logging in Korean, then Splunk can't translate that for you. You have to change the OS language to be English, and then Splunk will have it in English. The Korean UTF code only tells Splunk to use a non-standard coding to read the text, not to translate it.

View solution in original post

despoilerr
Loves-to-Learn Lots

@alacercogitatus @aaraneta_splunk  @benazir  i have a similar situation logs coming in French is there a way to translate to English in Splunk?

0 Karma

aaraneta_splunk
Splunk Employee
Splunk Employee

@benazir - Did the answer provided by alacercogitatus help provide a solution to your question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback/clarification. Thanks!

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

If Windows is logging in Korean, then Splunk can't translate that for you. You have to change the OS language to be English, and then Splunk will have it in English. The Korean UTF code only tells Splunk to use a non-standard coding to read the text, not to translate it.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...