I am trying to ingest SQL Audit logs as a Local File Source but it doesn't show the data in the correct format and shows garbled log messages.
It seems like an encoding issue. When you try to ingest data using a Local File source into Sumo Logic, log data within that file suppose to be a valid encoding format, we have a list of encoding formats which Sumo Logic is supporting.
Source Log Encoding:
The type of log encoding supported by Sumo Logic depends on the source you are using.
Local file sources:
Local file sources support the following encoding:
- UTF-8 (default)
For more information, see Local File Source.
Ingest your log data in either of the above encoding formats, which will take care of the issue.