https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-ILO5-props-conf/m-p/636297#M15856 <P>Hello, I need to parse ilo5 logs. I have tryed a lot of variants of props.conf, but no one had worked. I need to create a sourcetype for this. Here is an example of log</P> <P>Feb 13 10:14:32 11.34.20.65 1 2022-01-13T07:170:23Z ILOZY556597X4 iLO5 - - - Host REST logout: System Administrator</P> Tue, 28 Mar 2023 14:39:27 GMT ProPoPop 2023-03-28T14:39:27Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-ILO5-props-conf/m-p/636297#M15856 <P>Hello, I need to parse ilo5 logs. I have tryed a lot of variants of props.conf, but no one had worked. I need to create a sourcetype for this. Here is an example of log</P> <P>Feb 13 10:14:32 11.34.20.65 1 2022-01-13T07:170:23Z ILOZY556597X4 iLO5 - - - Host REST logout: System Administrator</P> Tue, 28 Mar 2023 14:39:27 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-ILO5-props-conf/m-p/636297#M15856 ProPoPop 2023-03-28T14:39:27Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-ILO5-props-conf/m-p/636299#M15857 <P>hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/251124">@ProPoPop</a>&nbsp;<BR /><BR />you might need to check the timestamp&nbsp; format of the log...<BR /><SPAN>2022-01-13T07<STRONG>:170:</STRONG>23Z</SPAN></P> Tue, 28 Mar 2023 11:26:01 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-ILO5-props-conf/m-p/636299#M15857 Gr0und_Z3r0 2023-03-28T11:26:01Z