0
votes
2answers
2k views

Splunk: How Do I Extract Fields from W3C Extended Format

I'm trying to configure Splunk to properly parse the fields of the W3C log format. Now, I'm running into configuration confusion: where and how do I specify how to split up the log format? My ...