Oct 20, 2016 11:49:56 PM UTC here is my time format and every event starts with with time.
in my props.conf i had
TIME_PREFIX=TIME_PREFIX = ^
MAX_TIMESTAMP_LOOKAHEAD = 28
TIME_FORMAT=%m/%d/%Y %H:%M:%S
is this correct?? if not can anyone please let me know where i am doing mistake
Thanks
The correct settings are:
TIME_PREFIX = ^
MAX_TIMESTAMP_LOOKAHEAD = 28
TIME_FORMAT = %b %d, %Y %H:%M:%S %p %Z
The correct settings are:
TIME_PREFIX = ^
MAX_TIMESTAMP_LOOKAHEAD = 28
TIME_FORMAT = %b %d, %Y %H:%M:%S %p %Z