Getting Data In

Is there a way to use a date in a CSV file name as the timestamp without editing datetime.xml or props.conf?

srichansen
Path Finder

Hi All,

I am trying to import a CSV file that has a date in the filename and I am wondering if it's possible to use that date as the timestamp without having to edit the datetime.xml and the props.conf files?

my file format is the following:
meetboek_2017-02-01.csv
meetboek_2017-02-02.csv

Ideally I would like all the events in the file to have a timestamp with 2017/02/01... etc.
All the various settings I have tried under advances in sourcetype have not worked and I can only get it to show the modtime.

Any tips or help in this would be appreciated.
Thanks in advance!
Simon

0 Karma
1 Solution

cpetterborg
SplunkTrust
SplunkTrust

This comes up fairly often, and the answer the last time I looked was, no, you cannot use the timestamp in the filename for the timestamp of the events.:

https://answers.splunk.com/answers/320978/how-to-extract-the-timestamp-from-a-filename-at-in.html

View solution in original post

0 Karma

cpetterborg
SplunkTrust
SplunkTrust

This comes up fairly often, and the answer the last time I looked was, no, you cannot use the timestamp in the filename for the timestamp of the events.:

https://answers.splunk.com/answers/320978/how-to-extract-the-timestamp-from-a-filename-at-in.html

0 Karma

srichansen
Path Finder

Yes, I had see the answers, but was hoping that it had since been solved.
Thanks for the assistance!

0 Karma
Get Updates on the Splunk Community!

New Splunk Observability innovations: Deeper visibility and smarter alerting to ...

You asked, we delivered. Splunk Observability Cloud has several new innovations giving you deeper visibility ...

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...