Some splunk events indexing without any date in them which makes manually insert the date in search query to search..
Now how can I make them indexing with certain date format?
Splunk version ;-6.1.8
What were the stanzas i should give and where?
↧