I need help with loading CSV files into Splunk with the event time recorded as seconds past midnight instead of HH:MM:SS time. Below is a sample of the data I need to load. How do I specify that the ...
See more...
I need help with loading CSV files into Splunk with the event time recorded as seconds past midnight instead of HH:MM:SS time. Below is a sample of the data I need to load. How do I specify that the time column is the number of seconds past midnight when defining the Timestamp for the Source Type? PickStartDate,BTVersion,TripNumber,Sequence,PassingTime,ArrivalTime,DepartureTime,FlagStop,ByPass,EarlyDeparture,event_line_number 2021-04-25,S1000216,1020,1,54900,54900.0,54900.0,0,0,,1 2021-04-25,S1000216,1020,2,54955,,,0,0,,2 2021-04-25,S1000216,1020,3,54999,,,0,0,,3