Forum Discussion
ifeldshteyn_384
Nimbostratus
NimbostratusF5 timestamp inquiry
Hello, we have a logfile being monitored by F5 that includes a syslog-formatted timestamp. When F5 reads the log and sends it to a secondary system, ex: Splunk, it appends another timestamp. Look at ...
Samir_Jha_52506
Noctilucent
NoctilucentReviewed both the lines, Difference between logs timestamps are 1Sec. So i recommend to add one more timestamps column in splunk server.
ifeldshteyn_384Nimbostratus
NimbostratusHi,
" I understand we can filter it out in Splunk but I don't want to waste the extra cycles as syslog is quite chatty."
I am trying to get rid of the timestamp on the F5 end, not on the Splunk end.
Thanks.
