Hi. I'm trying to add a new input with the Tenable add-on: https://splunkbase.splunk.com/app/4060/
When adding a new input I can input a "start time" from when the add-on will start collection data from Tenable, as opposed to "all time" I suppose, but no matter how I format my timestamp, the add-on won't accept it. See screenshot. I've tried all sort of variations, but all fail. I've also looked at the documentation (https://docs.tenable.com/integrations/Splunk/Content/Splunk2/CreateInput.htm) which suggest another time format than the add-on itself (probably not updated), but that isn't working either.
Has anyone gotten this to work, and if so, what is the correct way of formating the timestamp?
The literal character 'Z' is representative of the GMT/UTC time zone. It should be written as %Z in a time format string to ensure Splunk applies the right time zone.
Hi, I am not sure if this directly answers your question, but perhaps it could be of some help being that it is Tenable/Nessus related.
I recently developed a free open-source application called TenaPull, which processes Nessus data for ingestion by Splunk. There is more information here: