unfortunately not: everything looks empty even when I saw the events are there   ... View more

    original message looks like this: after trying with this eval command: - don't know if it is 100% correct eval _time=strptime(time,"%Y-%m-%d %H:%M:%S.%Q") it looks like this         ... View more

looks like this:     ... View more

sorry, what do you mean by "extracted" ? What I can see, please see also the screen dump on my question is, that the time field in the message show a different time than Splunk time. That I would say can be expected as Splunk recognize the time of uploading ... View more

yes,    time: 2020-11-16T15:15:51.113394.   is part of my event ... View more

Hey dmarling, I spotted your feedback searching in google how to upload files to Splunk using curl command. In my case, I'd like to upload a json formatted file but I have no idea how the curl command has too look like. So the normal usage of sending a single event I found in Splunk documentation looks as follows: curl -k "https://mysplunkserver.example.com:8088/services/collector" \ -H "Authorization: Splunk CF179AE4-3C99-45F5-A7CC-3284AA91CF67" \ -d '{"event": "Hello, world!", "sourcetype": "manual"}'  Are you able to help modifying this to allow me the upload of a json file? regard Ralf ... View more

Hi jwalthour, I'm new here and found your response here in community (even when far in the past) as I have same issue that .splunkrc file is not recognized. My understanding was, that if I have this file correctly setup and stored, I do not need to enter any login data to any Python script at all. But if I understood your Python example correctly, it ask actively to enter credentials and host/port  when I execute login.py   ... View more