×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
j3rb0i
Engager
Member since: ‎04-02-2020
‎06-15-2022
Community Statistics
Posts 1
Solutions 0
Karma Given 1
Karma Received 1
Member Since ‎04-02-2020
Activity Feed
Topics I've Started
No posts to display.
View All

Re: Defining Timestamp for HEC Input

by in Getting Data In
‎10-14-2021 04:59 PM
1 Karma
‎10-14-2021 04:59 PM
1 Karma
I ended up using the following thanks to this tip.  Works flawlessly: INGEST_EVAL=_time=strptime(spath(_raw,"timestamp"), "%Y-%m-%dT%H:%M:%S%3N%z") ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-15-2022 03:23 PM
Karma from
View All
Karma given to
View All