About emillg

emillg · ‎02-23-2019

@PowerPacked Thanks, but that didn't work either

emillg · ‎02-22-2019

@Vijeta I have tried the following in sourcetype, but didn't work. Did I miss something? TIME_PREFIX = \"date\":\" MAX_TIMESTAMP_LOOKAHEAD = 24 The raw text log looks like {"message":{"date":"2019-02-19T21:32:45.743Z","type":"XXX","description":"","connection_id":"","client_id":"XXX","client_name":"XXX","ip":"XXX","user_agent":"XXX","hostname":"XXX","user_id":"","user_name":"","audience":"XXX","scope":null,"auth0_client":{"name":"auth0-java","version":"1.0.0"},"_id":"XXX","log_id":"XXX","isMobile":false},"severity":"info"}

emillg · ‎02-22-2019

Hi, When sending logs to Splunk Cloud via HTTP Event Collector, Splunk was not able to extract the correct timestamp from the "date" field. But, when I uploaded the logs as a file, Splunk extracted the correct timestamp automatically. Can someone help? Thanks!

emillg · ‎02-17-2019

Hi, I am trying to install "Splunk Metrics Workspace" for Splunk Cloud following docs.splunk.com/Documentation/SMW/1.0.1/Use/Install#Install_the_Splunk_Metrics_Workspace_on_Splunk_Cloud. However I can not find "Splunk Metrics Workspace" via Browse More Apps. Can someone help? Thanks

Posts	4
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎02-17-2019

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

How do you extract a timestamp from JSON logs that...

Install "Splunk Metrics Workspace" for Splunk Clou...

Re: How do you extract a timestamp from JSON logs ...

Re: How do you extract a timestamp from JSON logs ...

How do you extract a timestamp from JSON logs that...

Install "Splunk Metrics Workspace" for Splunk Clou...