Getting Data In

Splunking Postgres log events WITHOUT a timestamp

maverick
Splunk Employee
Splunk Employee

Currently, my postgres log events do not contain a timestamp, which makes it difficult for splunking, especially historical events located in .zip files.

Does anyone know how to enable the logging of the current timestamp within each postgres event so I can splunk it properly?

0 Karma

cnemelka
New Member

Look for the entry:

log_line_prefix

in your postgresql.conf file.

Documentation is with the entry.

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...