Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Splunk App for Web Analytics: The search "Generate user sessions" needs to adapted when events contains a very precise _time field

$
0
0
I have nginx logs which contain very precise timestamp like this one: `2016-10-27 20:53:03.664`. Translated in seconds, it gives this value: `1477594383.66401`. As a consequence, the scheduled search to populate the table of sessions does not work. I have to replace these parts of the search string : replace(http_session_referrer_blablabla,"^[0-9]*_","")) by replace(http_session_referrer_blablabla,"^[0-9\.]*_","")) With this patch the http_session_referer fields are correctly populated even when the timestamp is very precise.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>