Dashboards & Visualizations

Hunk: timerange from filename

melonman
Motivator

Hi

Question about time range configuration in indexes.conf in Hunk.

I have many files in the form of "yyyyMMdd-access.log.gz" in one HDFS directory.
I can find the information how to configure time range (et/lt/offset) from HDFS path.
However, I still can not figure out how to configure the time range from filename.

Could anyone help with this?

0 Karma
1 Solution

Ledion_Bitincka
Splunk Employee
Splunk Employee

Not sure what the question/problem is. Setting up et/lt/offset in the virtual index should be similar to having the time info as part of the path.

View solution in original post

0 Karma

Ledion_Bitincka
Splunk Employee
Splunk Employee

Not sure what the question/problem is. Setting up et/lt/offset in the virtual index should be similar to having the time info as part of the path.

0 Karma
Get Updates on the Splunk Community!

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Community Content Calendar, November Edition

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...