Deployment Architecture

Can Universal forwarder read any Message Queue? Or we need HF with API/Splunk App?

anantdeshpande
Path Finder

We have requirement to read Message Queue. Mainframe data is getting feed to a data warehouse system. This warehouse system communicates to different application via Message Queue. We want to read this queue and index it. Is it possible to read it using Splunk Universal forwarder or we have to setup Heavy forwarder and use any API/App to index message queue data.

Tags (1)
0 Karma

anantdeshpande
Path Finder

My main purpose of the question is to know if Splunk Universal Forwarder can be used for MQ reading purpose. I do not have permission to use Heavy forwarder.

0 Karma

koshyk
Super Champion

which message queue product you using? Websphere MQ?
if yes, please have a look into this link: https://www.splunk.com/blog/2013/04/11/splunking-websphere-mq-queues-and-topics/ Uses JMS modular app

0 Karma

anantdeshpande
Path Finder

Mostly MQ format is xml.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...