timestamp only containing time

aaronkorn · ‎05-30-2013

We have a rolling log for everyday and can tell which log belongs to which date based on the name. The events in the log only contain times without the day and month. Is is it possible to add the date part from the file name or is there anything else we can to get the date added to the timestamp? We have another solution but it would require a restart of a highly critical clinical application and would be the last resort.

Thanks!

aholzer · ‎05-30-2013

See this question / answer:

http://splunk-base.splunk.com/answers/68599/get-timestamp-from-filename

This answer is fairly thorough and has a link to the documentation too.

timestamp only containing time

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

Index This | What has goals but no motivation?

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Join the Conversation

timestamp only containing time

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

Index This | What has goals but no motivation?

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security