https://community.splunk.com/t5/Getting-Data-In/TIME-PREFIX/m-p/684054#M114178 <P>Can you please let me know the TIME_PREFIX&nbsp; &amp; TIME_FORMAT for the below log type.<BR /><BR />00:0009:00000:00000:2024/04/12 12:14:02.34 kernel extended error information<BR />00:0009:00000:00000:2024/04/12 12:14:02.34 kernel&nbsp; read returning -1 state 1<BR />00:0009:00000:00000:2024/04/12 12:14:02.34 kernel nrpacket: recv, Connection timed out, spid: 501, suid: 84<BR /><BR /></P> Fri, 12 Apr 2024 16:24:08 GMT sathiyasun 2024-04-12T16:24:08Z https://community.splunk.com/t5/Getting-Data-In/TIME-PREFIX/m-p/684054#M114178 <P>Can you please let me know the TIME_PREFIX&nbsp; &amp; TIME_FORMAT for the below log type.<BR /><BR />00:0009:00000:00000:2024/04/12 12:14:02.34 kernel extended error information<BR />00:0009:00000:00000:2024/04/12 12:14:02.34 kernel&nbsp; read returning -1 state 1<BR />00:0009:00000:00000:2024/04/12 12:14:02.34 kernel nrpacket: recv, Connection timed out, spid: 501, suid: 84<BR /><BR /></P> Fri, 12 Apr 2024 16:24:08 GMT https://community.splunk.com/t5/Getting-Data-In/TIME-PREFIX/m-p/684054#M114178 sathiyasun 2024-04-12T16:24:08Z https://community.splunk.com/t5/Getting-Data-In/TIME-PREFIX/m-p/684060#M114180 <P>Hi</P><P>something like</P><LI-CODE lang="markup">TIME_PREFIX=^\d+:\d+:\d+:\d+: TIME_FORMAT=%Y/%m/%d %H:%M:%S.%2Q</LI-CODE><P>r. Ismo&nbsp;</P> Fri, 12 Apr 2024 16:50:22 GMT https://community.splunk.com/t5/Getting-Data-In/TIME-PREFIX/m-p/684060#M114180 isoutamo 2024-04-12T16:50:22Z