Splunk Search

Install MS SQL TA to convert and Ingest SQL trc binary files



I have some SQL trc binary files need to be ingested into SPLUNK from SQL server where UF has already been installed.  I am considering to use MS SQL TA which allows us to convert trc binary files to text files and send to SPLUNK indexer/SH. My question is where I should deploy the SQL TA ....in UF/ HF/SH.  Thank you so much, appreciate your support in these efforts.

Labels (1)
Tags (1)
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!