I've got 95% of this new input working, but was hoping to also configure the TZ (dynamically) based on the host name value. Would like to set the correct time zone based on the hostname starting with "CA" or "KC". I have the timezone settings to add to the props.conf just can't seem to figure out how to do this based on the host name.
How can I do that in my props.conf?? dataset is the same format, so was hoping to do this in the single props.conf file.
if host=CA* then TZ=America/Chicago
if host=KC* then TZ=America/Los_Angeles
current PROPS.CONF
[sourcetype_name]
SHOULD_LINEMERGE=true
LINE_BREAKER=([\r\n]+)
NO_BINARY_CHECK=true
CHARSET=UTF-8
disabled=false
TIME_FORMAT=%Y-%m-%d %H:%M:%S.%Q
↧