hey All
i want to extract date from filename the file name is as following :
filename xxx9935_20190223.txt
datetime.xml is as following:
<datetime>
<define name="mynewdate" extract="year, month, day">
<text><![CDATA[(?:^|source::).*?(?<!\d|\d\.|-)(?:20)?([901]\d)(0\d|1[012])([012]\d|3[01])(?!\d|-| {2,})]]></text>
</define>
<timePatterns>
<use name="mynewdate"/>
</timePatterns>
<datePatterns>
<use name="mynewdate"/>
</datePatterns>
</datetime>
and i edited the props.conf to be look like this
DATETIME_CONFIG = /etc/apps/mashreq_atm/default/datetime.xml
could any one check why this isn't working?
the problem is solved by following the steps in here recommended from the support:
https://www.splunk.com/blog/2009/12/02/configure-splunk-to-pull-a-date-out-of-a-non-standard-filenam...
the problem is solved by following the steps in here recommended from the support:
https://www.splunk.com/blog/2009/12/02/configure-splunk-to-pull-a-date-out-of-a-non-standard-filenam...