Getting Data In

configure time based lookup table

nagarjuna560
New Member

I have a CSV lookup table with a field that contains latest_event and the value is in format "12/25/2019 12:10" (%m/%d/%Y %H:%M) and the time zone is CST. I am comparing latest_event filed with some other fileds (_time

Tags (1)
0 Karma

nagarjuna560
New Member

I mentioned the name of the filed as "latest_event" and time format as "%m/%d/%Y %H:%M" ( 10/12/2019 10:12)

and I ran search | inputlookup lookupname.csv | table latest_event
I got the results as "10/12/2019 10:12", as per the documentation default time is in UTC, then the result should be like "10/12/2019 05:12"

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...