Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Can anyone help to get this data into Splunk properly?

$
0
0
I have tried to index this file without much success. It's driving me nuts how the fields are never separated correctly no matter what setting I change. I'd be grateful if anyone can try to index this file and let me know what are the props.conf settings you used. date time field101 field102 field103 field104 field105 field106 field107 field108 2008-10-1 00:15:00.0 35.947 46.170 26.839 26.161 0.079 0.099 0.160 36.833 2008-10-1 00:30:00.0 35.608 46.024 26.791 26.210 0.078 0.098 0.159 36.736 2008-10-1 00:45:00.0 35.608 45.879 26.549 25.871 0.080 0.100 0.162 36.929 2008-10-1 01:00:00.0 35.463 45.976 26.355 25.677 0.081 0.101 0.162 37.057 2008-10-1 01:15:00.0 35.608 45.879 26.452 26.210 0.080 0.100 0.162 36.873 2008-10-1 01:30:00.0 35.754 46.218 26.549 25.967 0.080 0.101 0.163 36.945 2008-10-1 01:45:00.0 35.705 46.170 26.452 26.258 0.081 0.101 0.164 36.949 2008-10-1 02:00:00.0 35.172 45.491 26.549 25.919 0.080 0.101 0.164 37.074 2008-10-1 02:15:00.0 35.415 45.831 26.452 25.919 0.080 0.101 0.163 36.993 2008-10-1 02:30:00.0 35.511 45.637 26.549 25.628 0.082 0.103 0.165 37.170

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>