Hi -
When viewing the malware_tracker kv store in lookup editor v3.4,6 on Splunk enterprise Version:
8.0.6 Build: 152fb4b2bb96 the dates in the firstTime and lastTime fields for all entries appears as 1970/01/19. If i use inputlookup/convert commands the dates are correct.
I read some previous posts regarding this same issue that indicate this is a bug in older versions, but the lookup editor version installed is 3.4.6.
Thanks,
Kris