Getting Data In
Highlighted

Single Digit Timestamp Problem

New Member

Splunk is not able to recognize the time stamp if the Min or the sec has 1 digit as in 9:2:3, but it can recognize 9:02:03. How to solve this?
My problem is not with the Hour digit, but with the Min and Sec digit.

Tags (2)
0 Karma
Highlighted

Re: Single Digit Timestamp Problem

Hi this will help :

docs.splunk.com/Documentation/Splunk/6.2.2/Data/Configuretimestamprecognition

0 Karma
Highlighted

Re: Single Digit Timestamp Problem

New Member

It does not, I have already ready that before posting the question. It doesn't say how to treat timestamp, if you have min and sec as single digit.

0 Karma