Splunk Enterprise

How to create ILO5 props.conf?

ProPoPop
Loves-to-Learn Lots

Hello, I need to parse ilo5 logs. I have tryed a lot of variants of props.conf, but no one had worked. I need to create a sourcetype for this. Here is an example of log

Feb 13 10:14:32 11.34.20.65 1 2022-01-13T07:170:23Z ILOZY556597X4 iLO5 - - - Host REST logout: System Administrator

0 Karma

Gr0und_Z3r0
Contributor

hi @ProPoPop 

you might need to check the timestamp  format of the log...
2022-01-13T07:170:23Z

0 Karma
Get Updates on the Splunk Community!

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...

Introducing New Splunkbase Governance!

Splunk apps are essential for maximizing the value of your Splunk Experience. Whether you’re using the default ...