topic Reading .trc file in splunk in Getting Data In

Reading .trc file in splunk

abhayneilam — Thu, 30 May 2013 05:22:07 GMT

Hi,

My sql server is generating .trc file(s) which I am trying to import in Splunk, but splunk is not able to read/index the data correctly.
Can you please let me know how this issue can be solved ? Is there any application available in SPLUNK with the help of which I can easily read .trc file OR any thing needs to be written in the configuration file(s) of splunk so that it will be in a readable format before getting indexed into splunk.

Please help as I need it very urgently !!

Thanks in advance

Re: Reading .trc file in splunk

MuS — Thu, 30 May 2013 06:26:41 GMT

Hi abhayneilam

this answer will get you started http://splunk-base.splunk.com/answers/491/can-splunk-index-sql-server-trace-trc-logs

btw I found it by using the search box in answers, it's a quiet nice feature and can also be used directly like this, where q=trc is what you are looking for http://splunk-base.splunk.com/search/?q=trc&Submit=Search 😉

cheers, MuS