https://community.splunk.com/t5/Getting-Data-In/filtering-out-data-without-a-timestamp/m-p/48414#M9172 <P>Hi,</P> <P>I have some logfiles that include data that I don't want - the lines don't have timestamps, and begin with either a comment (&lt;!--) or a stylesheet statement (&lt;xsl...). Is there a way filter this stuff out? </P> Fri, 01 Mar 2013 15:24:31 GMT a212830 2013-03-01T15:24:31Z https://community.splunk.com/t5/Getting-Data-In/filtering-out-data-without-a-timestamp/m-p/48414#M9172 <P>Hi,</P> <P>I have some logfiles that include data that I don't want - the lines don't have timestamps, and begin with either a comment (&lt;!--) or a stylesheet statement (&lt;xsl...). Is there a way filter this stuff out? </P> Fri, 01 Mar 2013 15:24:31 GMT https://community.splunk.com/t5/Getting-Data-In/filtering-out-data-without-a-timestamp/m-p/48414#M9172 a212830 2013-03-01T15:24:31Z https://community.splunk.com/t5/Getting-Data-In/filtering-out-data-without-a-timestamp/m-p/48415#M9173 <P>You can do <STRONG>index time nullQueue filtering</STRONG> based on a regex, it has to be setup at the indexer level.<BR /> But be aware that if you apply that rule to all your events, it may have performance impact.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.2/Deploy/Routeandfilterdatad#Discard_specific_events_and_keep_the_rest">http://docs.splunk.com/Documentation/Splunk/5.0.2/Deploy/Routeandfilterdatad#Discard_specific_events_and_keep_the_rest</A></P> Fri, 01 Mar 2013 16:39:43 GMT https://community.splunk.com/t5/Getting-Data-In/filtering-out-data-without-a-timestamp/m-p/48415#M9173 yannK 2013-03-01T16:39:43Z