Since Splunk Add-on for VMware pull a lot performance data from vCenter, I need to index performance data 1 minute at the minute 0,15,30,45 However, there is no time data in _raw to filter out the data. Please help!
↧