Re: Configer time

SplunkBaby · ‎03-19-2014

Hi

How can i configure sulunk to read timestamp from input files.
I have a set of log files which is of format log_MMDDYY.
I want splunk to read this MMDDYY time from file and populate this time in _time.
How can I achieve this.

Thanks

somesoni2 · ‎03-19-2014

See @gkanapathy comments.

http://answers.splunk.com/answers/3005/getting-event-timestamp-from-source-file-name

Configer time

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Join the Conversation