Configer time

SplunkBaby · ‎03-19-2014

Hi

How can i configure sulunk to read timestamp from input files.
I have a set of log files which is of format log_MMDDYY.
I want splunk to read this MMDDYY time from file and populate this time in _time.
How can I achieve this.

Thanks

somesoni2 · ‎03-19-2014

See @gkanapathy comments.

http://answers.splunk.com/answers/3005/getting-event-timestamp-from-source-file-name

Configer time

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Event Series: Telemetry Pipeline Management

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Join the Conversation

Configer time

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Event Series: Telemetry Pipeline Management

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...