All Apps and Add-ons

time setting for azure:eventhub using TA-MS-AAD

rayar
Communicator

How _time will be set for azure:eventhub using TA-MS-AAD  by default  ?

I don't see any configuration for _time but the indextime and the _time are not identical  

 

[azure:eventhub]
SHOULD_LINEMERGE = 0
category = Splunk App Add-on Builder
pulldown_type = 1
####################
# Metrics
####################

 

Few results for reference 

_time indextime count

2021-10-14 13:00:01.4312021-10-14 13:10:271
2021-10-14 13:00:01.4312021-10-14 13:10:351
2021-10-14 13:00:01.4312021-10-14 13:10:371
2021-10-14 13:00:01.4312021-10-14 13:10:43
Labels (1)
Tags (1)
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!