topic All fields from a lookup.csv file appear except the date field? in Splunk Search

All fields from a lookup.csv file appear except the date field?

boris — Sat, 07 Apr 2012 00:06:31 GMT

All fields from a lookup.csv file appear as available search fields except the date field.

Here is how I defined the start_date field in my lookup.csv file:

'2012-03-12 20:10'

%Y-%m-%d %H:%M

So how can I get this start_date field to appear as a potential field in my searching here?

MarioM — Sun, 08 Apr 2012 09:29:34 GMT

can you post an extract of your lookup.csv with the header?

boris — Mon, 09 Apr 2012 17:51:25 GMT

Thanks MarioM. After looking at the raw .csv of the lookup file I see the dates were formatted differently then I expected.

boris — Mon, 09 Apr 2012 17:52:26 GMT

After looking at the raw .csv of the lookup file I see the dates were formatted differently then I expected.