Getting Data In

Is it possible to use the header in a csv file for timestamps?

Moogz
Splunk Employee
Splunk Employee

I have a CSV file that has the following header:

ColumnName1, ColumnName2, Date1, Date2, Date3, Date4, Date5, Date6, and so on......

The first two columns describe my data and the rest of the columns consist of values for each of the different dates. Is there a way to get splunk to use the date columns as a timestamp for all of the values in each column?

0 Karma

ogdin
Splunk Employee
Splunk Employee

In Splunk 6, you can choose one of the Date columns to use as the timestamp.

http://docs.splunk.com/Documentation/Splunk/latest/Data/Extractfieldsfromfileheadersatindextime

TIMESTAMP_FIELDS = Date1

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...