|
After upgrading from 4.3 to 4.3.1, I have a few log files that splunk has changed the date format from month/day/year to year/month/day. The log files that have changed are being forwarded from splunk 4.3 full (not the universal forwarder) to my splunk index server which is the one I upgraded to 4.3.1. In an effort to resolve the issue I upgraded the forwarder to 4.3.1, but this did not fix the issue. The log files have always been Y/M/D format and up until the upgrade Splunk had parsed these as M/D/Y without any changed using the syslog template. |
Refine your search:
- Apps & Questions
- Apps
- Questions
- Users
- Tags
Markdown Basics
- *italic* or _italic_
- **bold** or __bold__
- link:[text](http://url.com/ "Title")
- image?
- numbered list: 1. Foo 2. Bar
- to add a line break simply add two spaces to where you would like the new line to be.
- basic HTML tags are also supported
Tags:
Asked: 08 Mar '12, 08:18
Seen: 560 times
Last updated: 08 Mar '12, 09:51