<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Splunk Apache %T %D in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-Apache-T-D/m-p/100463#M21028</link>
    <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;Can you post the contents of props.conf and transforms.conf here ? That will help in debugging the issue.&lt;/P&gt;

&lt;P&gt;Regards,&lt;BR /&gt;
Amit Saxena&lt;/P&gt;</description>
    <pubDate>Sat, 27 Jul 2013 18:46:16 GMT</pubDate>
    <dc:creator>amit_saxena</dc:creator>
    <dc:date>2013-07-27T18:46:16Z</dc:date>
    <item>
      <title>Splunk Apache %T %D</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-Apache-T-D/m-p/100462#M21027</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;I have a plunk server and it reads the logs from our web servers. Weve recelty added on the end the %T %D time flag. Splunk just shows this as other. &lt;/P&gt;

&lt;P&gt;Ive tried a few things to add it to the transforms file and props file but nothing works. How can I add these flags so they are seen correctly?&lt;/P&gt;

&lt;P&gt;Matt&lt;/P&gt;</description>
      <pubDate>Fri, 19 Jul 2013 08:10:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Splunk-Apache-T-D/m-p/100462#M21027</guid>
      <dc:creator>matthab</dc:creator>
      <dc:date>2013-07-19T08:10:00Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk Apache %T %D</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-Apache-T-D/m-p/100463#M21028</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;Can you post the contents of props.conf and transforms.conf here ? That will help in debugging the issue.&lt;/P&gt;

&lt;P&gt;Regards,&lt;BR /&gt;
Amit Saxena&lt;/P&gt;</description>
      <pubDate>Sat, 27 Jul 2013 18:46:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Splunk-Apache-T-D/m-p/100463#M21028</guid>
      <dc:creator>amit_saxena</dc:creator>
      <dc:date>2013-07-27T18:46:16Z</dc:date>
    </item>
  </channel>
</rss>

