Getting Data In

Reading .trc file in splunk

abhayneilam
Contributor

Hi,

My sql server is generating .trc file(s) which I am trying to import in Splunk, but splunk is not able to read/index the data correctly.
Can you please let me know how this issue can be solved ? Is there any application available in SPLUNK with the help of which I can easily read .trc file OR any thing needs to be written in the configuration file(s) of splunk so that it will be in a readable format before getting indexed into splunk.

Please help as I need it very urgently !!

Thanks in advance

Tags (2)
0 Karma

MuS
SplunkTrust
SplunkTrust

Hi abhayneilam

this answer will get you started http://splunk-base.splunk.com/answers/491/can-splunk-index-sql-server-trace-trc-logs

btw I found it by using the search box in answers, it's a quiet nice feature and can also be used directly like this, where q=trc is what you are looking for http://splunk-base.splunk.com/search/?q=trc&Submit=Search 😉

cheers, MuS

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...