Hello All,
Can any one please help me to extract date from filename in Splunk? below is my existing configuration, but am not able to get file name date as indexing date in splunk.
Below is my existing configuration
inputs.conf
[monitor://C:\sampletestfile\*]
index=test
sourcetype=largefile
crcSalt =
datetime.xml
props.conf
[largefile]
DATETIME_CONFIG = /etc/apps/myapp/local/datetime.xml
My filename is my_20170606.txt.
Thanks in Adavance