Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Timestamp difference

$
0
0
Hi, ![alt text][1] Index time 4 hours behind the actual timestamp of the database row we are pulling in as event. This is resulting in wrong Order Line count for events which are created between midnight 12 through 4 AM. Here is an example: Looks at • Index Time: 9/1/2016 12:21:36 PM • OrderEntryDate: 2016-09-01 16:21:35 Can you anyone suggest me how can i change the index time _time as Order Entry Date? [1]: /storage/temp/157220-timestamp.png

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>