All Apps and Add-ons

time setting for azure:eventhub using TA-MS-AAD

rayar
Contributor

How _time will be set for azure:eventhub using TA-MS-AAD  by default  ?

I don't see any configuration for _time but the indextime and the _time are not identical  

 

[azure:eventhub]
SHOULD_LINEMERGE = 0
category = Splunk App Add-on Builder
pulldown_type = 1
####################
# Metrics
####################

 

Few results for reference 

_time indextime count

2021-10-14 13:00:01.4312021-10-14 13:10:271
2021-10-14 13:00:01.4312021-10-14 13:10:351
2021-10-14 13:00:01.4312021-10-14 13:10:371
2021-10-14 13:00:01.4312021-10-14 13:10:43
Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...