Re: Configer time

SplunkBaby · ‎03-19-2014

Hi

How can i configure sulunk to read timestamp from input files.
I have a set of log files which is of format log_MMDDYY.
I want splunk to read this MMDDYY time from file and populate this time in _time.
How can I achieve this.

Thanks

somesoni2 · ‎03-19-2014

See @gkanapathy comments.

http://answers.splunk.com/answers/3005/getting-event-timestamp-from-source-file-name

Configer time

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

[Puzzles] Solve, Learn, Repeat: Classic British Rock Bands

New to the Community? Join Us for an Exclusive Post .conf26 Welcome Session (Plus a ...

Accelerate Splunk App Development with AI

Join the Conversation