<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to index an XML file with unix time format in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-index-an-XML-file-with-unix-time-format/m-p/472862#M81255</link>
    <description>&lt;P&gt;Try these props&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[myxml]
TIME_FORMAT = %s
TIME_PREFIX = \&amp;lt;begin&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Wed, 15 Apr 2020 16:59:29 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2020-04-15T16:59:29Z</dc:date>
    <item>
      <title>How to index an XML file with unix time format</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-index-an-XML-file-with-unix-time-format/m-p/472861#M81254</link>
      <description>&lt;P&gt;I have XML files in my PC that I want to index them in Splunk, I need the inputs and the props.conf changed. I did everything but I am stock into line breaking events. &lt;BR /&gt;
I have it in unix time format which is something like: &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;Date_range&amp;gt;
&amp;lt;begin&amp;gt;1586965192&amp;lt;/begin&amp;gt;
&amp;lt;end&amp;gt;1586965199&amp;lt;/end&amp;gt;
&amp;lt;/Date_range&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;How to specify the time format !!?&lt;BR /&gt;
and, I have no idea how to specify time format in my props.conf or transform.conf.  if u have anything might help, please!!&lt;/P&gt;</description>
      <pubDate>Wed, 15 Apr 2020 15:52:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-index-an-XML-file-with-unix-time-format/m-p/472861#M81254</guid>
      <dc:creator>almotasim90</dc:creator>
      <dc:date>2020-04-15T15:52:43Z</dc:date>
    </item>
    <item>
      <title>Re: How to index an XML file with unix time format</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-index-an-XML-file-with-unix-time-format/m-p/472862#M81255</link>
      <description>&lt;P&gt;Try these props&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[myxml]
TIME_FORMAT = %s
TIME_PREFIX = \&amp;lt;begin&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Wed, 15 Apr 2020 16:59:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-index-an-XML-file-with-unix-time-format/m-p/472862#M81255</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2020-04-15T16:59:29Z</dc:date>
    </item>
  </channel>
</rss>

