https://community.splunk.com/t5/Getting-Data-In/Time-Format/m-p/582202#M102575 <P>Hi</P><P>When you have several different time formats on one log file then you could use transforms.conf with INGEST_EVAL. There is a conf presentation about it also some other examples &nbsp;can easily found from google.</P><P>r. Ismo</P> Mon, 24 Jan 2022 07:17:20 GMT isoutamo 2022-01-24T07:17:20Z https://community.splunk.com/t5/Getting-Data-In/Time-Format/m-p/582189#M102572 <P>Hi,</P><P>&nbsp;</P><P>Is it possible to have two different Time Formats?</P><P><SPAN>Some logs are having the first time format and other logs are having second time format.</SPAN></P><P><SPAN>Apart from datetime.xml, is there any other way?</SPAN></P><P>&nbsp;</P><P><SPAN>2022-01-24 02:27:20.989</SPAN></P><P><SPAN>2022-01-24T02:27:20.989</SPAN></P> Mon, 24 Jan 2022 02:45:05 GMT https://community.splunk.com/t5/Getting-Data-In/Time-Format/m-p/582189#M102572 VijaySrrie 2022-01-24T02:45:05Z https://community.splunk.com/t5/Getting-Data-In/Time-Format/m-p/582202#M102575 <P>Hi</P><P>When you have several different time formats on one log file then you could use transforms.conf with INGEST_EVAL. There is a conf presentation about it also some other examples &nbsp;can easily found from google.</P><P>r. Ismo</P> Mon, 24 Jan 2022 07:17:20 GMT https://community.splunk.com/t5/Getting-Data-In/Time-Format/m-p/582202#M102575 isoutamo 2022-01-24T07:17:20Z