Splunk Enterprise

How to create ILO5 props.conf?

ProPoPop
Loves-to-Learn Lots

Hello, I need to parse ilo5 logs. I have tryed a lot of variants of props.conf, but no one had worked. I need to create a sourcetype for this. Here is an example of log

Feb 13 10:14:32 11.34.20.65 1 2022-01-13T07:170:23Z ILOZY556597X4 iLO5 - - - Host REST logout: System Administrator

0 Karma

Gr0und_Z3r0
Contributor

hi @ProPoPop 

you might need to check the timestamp  format of the log...
2022-01-13T07:170:23Z

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...