Monitoring Splunk

Can Splunk monitor informatica logs? say Session or workflow logs?

Durga_Amaraneni
Engager

Hi,

We would like to use splunk to monitor our ETL informatica logs.. we have more than 1000 wfs running, and its difficult to maintain different logs folders and maintain different drives..

After getting to know about wonders of Splunk, we would like to integrate informatica and direct logs to SPlunk..

Can someone tell if this is possible ? if Yes, how?

also, can you confirm if Splunk has any limitation on the file types it cannot montior? say .bin files?

our informatica logs come in .bin format...

regards,
DG

Tags (1)

naga2005
Engager

Informatica 9 onwards, there is a command provided in command reference guide of informatica as:

tail -n +1 -f LOG_FILENAME.bin | $INFA_HOME/server/bin/infacmd.sh convertlogfile -in /dev/stdin -fm text

This will convert binary file into simple text.

0 Karma

jbuckner85
Path Finder

Will this send the output to a file which can then be read by splunk?

0 Karma

DalJeanis
Legend

Heh. It has to send it somewhere, so in theory splunk could monitor that spot.

However, in practice, I would bet that your Informatica DBA/sysadmin/security folks would all prefer to transfer it somewhere else rather than giving splunk direct access to a presumably sensitive location.

0 Karma

gfuente
Motivator

Hello

Splunk can only read plain text files, if your logs are in binary format, you would need to convert them to text files, if you have an script to convert the format, the forwarder also can run it and index the outputs afterwards

regards

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...