Hallo all,
I'm using the "Splunk Add-on for Microsoft Windows" to monitor a blob storage (which is a great feature). It works fine for text files.
However it doesn't handle zip files well.
If I monitor zip files on the file system I have no problems. If I use the same sourcetype to monitor the same zip files stored in a Blob it reads it in as if it were text (,�{7�~4)Tk�tȺ��Ќ����8>�D3��QԈ0T�� = same 8 lines as you would get if you open the zip file in a text editor.)
Has anyone any suggestions how to solve / workaround this?
Thanks
↧