topic Re: How do I change a CSV timestamp? in Getting Data In

How do I change a CSV timestamp?

miguel1423 — Wed, 16 Mar 2022 15:58:55 GMT

Hello,

I add an CSV data into my splunk without any timestamp and SPLUNK add automatiquely an timestamp with the format "3/16/22 4:33:55.000 PM" I would like change the date on the format "3/16/22" how can I do that ?

Regards,

Re: How do I change a CSV timestamp?

vinod743374 — Thu, 31 Mar 2022 05:21:46 GMT

You Can try Like this,

| eval timeformat=strftime(_time,"%m/%d/%y")

Re: How do I change a CSV timestamp?

VatsalJagani — Thu, 31 Mar 2022 05:40:23 GMT

Can you please provide sample data or screenshot of which timestamp you are talking about?

And also how you have added the CSV in Splunk.