For Splunk administrators and consultants, this cheat sheet contains hints for props.conf, the most common date and time format variables, some hints on rewriting default fields, using lookups, and more.
For Splunk administrators and consultants, this cheat sheet contains hints for props.conf, the most common date and time format variables, some hints on rewriting default fields, using lookups, and more.