https://community.splunk.com/t5/Deployment-Architecture/SQL-Server-ERRORLOG/m-p/457536#M24696 <P>i'm new to splunk<BR /> i'm having the same issue as <A href="https://answers.splunk.com/answers/24484/sql-server-errorlog.html#answer-746299" target="_blank">https://answers.splunk.com/answers/24484/sql-server-errorlog.html#answer-746299</A>, i have tried </P> <P>[sqlserver_errorlog]<BR /> CHARSET = UTF-16LE<BR /> NO_BINARY_CHECK = true</P> <P>on my UF and indexer with no luck. however, i think i might updating wrong props.conf</P> <P>what is the right path for props.conf on both UF and indexer please.</P> <P>Thank you in advance </P> Wed, 30 Sep 2020 00:32:38 GMT aalbaker 2020-09-30T00:32:38Z https://community.splunk.com/t5/Deployment-Architecture/SQL-Server-ERRORLOG/m-p/457536#M24696 <P>i'm new to splunk<BR /> i'm having the same issue as <A href="https://answers.splunk.com/answers/24484/sql-server-errorlog.html#answer-746299" target="_blank">https://answers.splunk.com/answers/24484/sql-server-errorlog.html#answer-746299</A>, i have tried </P> <P>[sqlserver_errorlog]<BR /> CHARSET = UTF-16LE<BR /> NO_BINARY_CHECK = true</P> <P>on my UF and indexer with no luck. however, i think i might updating wrong props.conf</P> <P>what is the right path for props.conf on both UF and indexer please.</P> <P>Thank you in advance </P> Wed, 30 Sep 2020 00:32:38 GMT https://community.splunk.com/t5/Deployment-Architecture/SQL-Server-ERRORLOG/m-p/457536#M24696 aalbaker 2020-09-30T00:32:38Z