What file would you edit to extract that field automatically in the future?
Hi 1dbenzo
Doc Team (greeting this way!) made some great effort in writing everything here:
http://www.splunk.com/base/Documentation/latest/Data/Configureindex-timefieldextraction
regards, MuS
Hi 1dbenzo
Doc Team (greeting this way!) made some great effort in writing everything here:
http://www.splunk.com/base/Documentation/latest/Data/Configureindex-timefieldextraction
regards, MuS