Getting Data In

Can we pick the timestamp from the filename ??

rakesh_498115
Motivator

Hi..

I have a source files with the following names (data_2013-08-2119.21.04.log) , here 2013-08-2119.21.04 is the timestamp that log is created. Now i need for all the events in this log to have the time as 2013-08-2119.21.04 i.e _time should be 2013-08-2119.21.04 and it should be based on the source files... is this possible in splunk ??

Can any pls help here..??

Tags (2)
0 Karma

Ayn
Legend
0 Karma

rakesh_498115
Motivator

Thanks Ayn..even i found this..Is there any example for thi s case pls..i am looking for a syntax and example of this scenerio...

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!