i am using the db connect app to get the data from my db.
i have a date formate like 2005-05-30
and my input.conf is
and the error log is like this
plz help~
Please try to increase MAX_DAYS_AGO in props.conf.
Here is the answer you can refer to:
http://answers.splunk.com/answers/24668/how-do-you-limit-the-amount-of-time-that-splunk-looks-into-t...
Please try to increase MAX_DAYS_AGO in props.conf.
Here is the answer you can refer to:
http://answers.splunk.com/answers/24668/how-do-you-limit-the-amount-of-time-that-splunk-looks-into-t...