timestamp only containing time

[aaronkorn]

We have a rolling log for everyday and can tell which log belongs to which date based on the name. The events in the log only contain times without the day and month. Is is it possible to add the date part from the file name or is there anything else we can to get the date added to the timestamp? We have another solution but it would require a restart of a highly critical clinical application and would be the last resort.

Thanks!

[aholzer]

See this question / answer:

http://splunk-base.splunk.com/answers/68599/get-timestamp-from-filename

This answer is fairly thorough and has a link to the documentation too.