Coradiant TrueSight API export format

[sbakker]

Hi,

We're using Coradiant TrueSight AIMs, and want to import the API export files periodically into Splunk.

On the Splunk site, there was an announcement on Splunk and Coradiant doing something together; has that lead to sourcetypes: TrueSightPages, TrueSightObjects, TrueSightSessions, TrueSightErrors?

If these sourcetypes are available, where can I obtain them?

Thanks! Regards, Sjoerd

PS. when importing the files currently, they map to the CSV format, but don't position on the timeline, because the startdate isn't recognised apparantly. If this is fixable, I already could use it...

[araitz]

Yeah, not sure about where that might be. Your best bet might be to post some sanitized sample data and have the current community take a shot at it.

[agrant]

I think I'm looking for the same thing. The announcement was back in 2007, so probably too old. I have a client with some documentation relating to Splunk 2.2.6 for TrueSight