Splunk Search

Install MS SQL TA to convert and Ingest SQL trc binary files

SplunkDash
Motivator

Hello,

I have some SQL trc binary files need to be ingested into SPLUNK from SQL server where UF has already been installed.  I am considering to use MS SQL TA which allows us to convert trc binary files to text files and send to SPLUNK indexer/SH. My question is where I should deploy the SQL TA ....in UF/ HF/SH.  Thank you so much, appreciate your support in these efforts.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...