Hi All,
We have Splunk environment with Indexers clustered and many forwarders managed by Deployment server. We are monitoring some of CSV files of an application using Universal Forwarders. Now, Can I extract Index time fields (calculated fields) using existing column headers without altering the CSV file? If yes, Can you guide me to some documents?
Thanks in advance.
Hello @siva_cg,
Here you go,