cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
TimothyPeh
Engager
Member since: ‎04-02-2013
‎06-05-2020
Community Statistics
Posts 4
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎04-02-2013
Activity Feed
View All

Re: Extracting Timestamp from a txt file

by in Getting Data In
‎10-25-2013 02:15 AM
‎10-25-2013 02:15 AM
Hi bob, Thanks! However, I have another problem. This solution works when I use it with data preview. When I tried to edit the props.conf file for my existing data that were indexed already, nothing seems to have changed at all. ... View more

Extracting Timestamp from a txt file

by in Getting Data In
‎10-25-2013 01:41 AM
‎10-25-2013 01:41 AM
Hi all, I know that there are several post on this question before, but I can't seem to figure out the correct answer to my question. My data comes in a form of text file, where each line is a record. There are no delimiters, hence the only way to tell is by positions. D HE12*201303250000**0100GTB27000170000100014000000000000045056000450560003300012 0003300012 000000000100000 00000 000000000000000 00000 00045056000450560003300012 0003300012 The portion in bold is the date-time stand which I'm trying to extract. So it translate to: Year:2013 Month: 03 Day: 25 Time: 0000 (Midnight) This is my current props.conf [CPOF] NO_BINARY_CHECK = 1 SHOULD_LINEMERGE = FALSE PULLDOWN_TYPE = 1 TIME_PREFIX = ??? TIME_FORMAT = %Y%m%d%h%m Not sure what to fill in for the time_prefix and also if my time_format is correct? Thanks! ... View more

How to process a text file

by in Getting Data In
‎10-13-2013 08:13 PM
‎10-13-2013 08:13 PM
Hi, I have a test file which I want to process in Splunk. I'm able to load it into Splunk, but I'm trying to get Splunk to understand the fields and I'm stuck in what to do next. For example: Timestamp Event 1 10/14/13 10:43:35.000 AM H20130326 2 10/14/13 10:43:35.000 AM D HE12201303250329551124038092GTB27C02020402201303250337540000700000000000000 3 10/14/13 10:43:35.000 AM D HE12201303250331431120034094GTB27C02020402201303250341580001000000000000000 4 10/14/13 10:43:35.000 AM D HE12201303250349001050366450GTB27C02020402201303250350440000100000000000000 As you can see, my data is pretty much a long line of characters. In excel, I would use delimiter by field length to extract the data for excel to understand the file. Can I do the same thing with Splunk? Much help is appreciated! Thanks in advanced. ... View more

How to add web sphere logs into Splunk Websphere A...

by in All Apps and Add-ons
‎06-24-2013 01:13 AM
‎06-24-2013 01:13 AM
I am currently doing a POC where I want to index 1 websphere log file on my local host onto the Splunk app and see what kind of analysis can I do. However, I cannot find the option to upload to the app. I can upload it generically to the search app but not to the Websphere App. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:03 AM
Karma given to
View All