How do I verify that the datetime.xml file is applied?

[spl109]

hi

After applying the FixDatetimexml2020 patch.
How do I verify that the datetime.xml file is applied?

For example
After setting multithreaded => singlethreaded

    ./splunk cmd btool  limits list | grep phased_execution_mode

As confirmed by the above method.

========================================================
안녕하세요.
FixDatetimexml2020 patch를 적용 후
datetime.xml이 적용이 잘 됐는지 어떻게 확인 할 수 있을까요?

예를들어
multithreaded => singlethreaded로 설정을 적용 한 후

./splunk cmd btool limits list | grep phased_execution_mode

위 명령어로 확인 했듯이

Thank you

[woodcock]

See here:
https://answers.splunk.com/answers/787821/how-can-we-verify-the-patch-that-has-been-provided.html

[richgalloway · Accepted solution]

To test the fix, try ingesting a file that contains the two-digit year "20". Use a test index, of course. You'll also need to set MAX_DAYS_HENCE in props.conf to a value that includes the date in the file (at least 30).

[spl109]

Thank you for your answer.

We checked the patches.
I wanted to make sure it was applied well on the operating server.

I was wondering if there was any other way besides an integrity check message.

[spl109]

https://docs.splunk.com/Documentation/Splunk/8.0.0/ReleaseNotes/FixDatetimexml2020

Validate timestamp extraction after an update.

[Sukisen1981]

probably you should get an message like this in tne monitoring console?

File Integrity checks found 1 files that did not match the system-provided manifest. Review the list of problems reported by the InstalledFileHashChecker in splunkd.log File Integrity Check View ; potentially restore files from installation media, change practices to avoid changing files, or work with support to identify the problem.
https://docs.splunk.com/Documentation/Splunk/latest/ReleaseNotes/FixDatetimexml2020

If you are asking how do we know that the patch has fixed the issue- wait till jan 2020 , I guess!