I have a timestamp like this "2020-Jan-01 21:59"
When I ingest data, I want this timestamp field to be registered as _time field in splunk
What is the right striptime() string to use to parse this my timestamp?
Looks like "%Y-%b-%d %H:%M"
View solution in original post