I am trying to extract time stamp from log file which will help me to use log TimeStamp instead of splunk time stamp.
I have tried to match the time using regex in props.conf but the regex is not at all showing the date. I have tried everything but Splunk doesn't recognize the log date. Please guide me as am not an regex expert.
2013:6:18-11:18 -- IP:: 10.121.230.155 REQUEST URI:: www...
I'm pretty sure you should be editing TIMEFORMAT, not TIMEPREFIX. Not only that, you aren't specifying which fields are year, month, etc.