All Apps and Add-ons

How can I configure the timestamp when creating a data input for Splunk Hadoop Connect?

remnant_8
Explorer

hi

I'm trying to use Splunk Hadoop Connect to get data. I followed these steps:
1) install hadoop app
2) connect hadoop namenode
3) click "explore" on configure menu
4) click "data input" and I can set resource name, sourcetype , localhost , index
but I can't find "configuring timestamp"

Hadoop data has RDBMS structure, so I have to set the "DATE" field set as timestamp
please expert alt textanswer

0 Karma

bosburn_splunk
Splunk Employee
Splunk Employee

Splunk should automatically pick up the date. If you need to configure date recognition, you will need to use props.conf.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...