https://community.splunk.com/t5/Getting-Data-In/Getting-date-and-time-from-CSV/m-p/113865#M23827 <P>Hi,</P> <P>This is on Splunk 5 and I have a csv file sample header as foo,foo2,foo3,foo4,foo5,foo6<BR /> The date is on foo3 as 17/5/13 and the time is on foo5 as 815 </P> <P>I have the below in my props<BR /><BR /> [stype]<BR /><BR /> INDEXED_EXTRACTIONS = CSV<BR /><BR /> TIMESTAMP_FIELDS = foo3,foo5<BR /><BR /> TIME_FORMAT=%d-%m-%y %H%M<BR /><BR /> SHOULD_LINEMERGE = False<BR /><BR /> pulldown_type = 1<BR /><BR /> HEADER_FIELD_LINE_NUMBER = 1<BR /><BR /> REPORT-stype = stype_extract<BR /><BR /> and transform<BR /><BR /> [stype_extract]<BR /><BR /> DELIMS=","<BR /><BR /> FIELDS = "foo1", "foo2", "foo3", "foo4", "foo5",<BR /><BR /> Please kindly advise where i am missing. Thanks</P> Mon, 28 Sep 2020 15:04:03 GMT psow_splunk 2020-09-28T15:04:03Z https://community.splunk.com/t5/Getting-Data-In/Getting-date-and-time-from-CSV/m-p/113865#M23827 <P>Hi,</P> <P>This is on Splunk 5 and I have a csv file sample header as foo,foo2,foo3,foo4,foo5,foo6<BR /> The date is on foo3 as 17/5/13 and the time is on foo5 as 815 </P> <P>I have the below in my props<BR /><BR /> [stype]<BR /><BR /> INDEXED_EXTRACTIONS = CSV<BR /><BR /> TIMESTAMP_FIELDS = foo3,foo5<BR /><BR /> TIME_FORMAT=%d-%m-%y %H%M<BR /><BR /> SHOULD_LINEMERGE = False<BR /><BR /> pulldown_type = 1<BR /><BR /> HEADER_FIELD_LINE_NUMBER = 1<BR /><BR /> REPORT-stype = stype_extract<BR /><BR /> and transform<BR /><BR /> [stype_extract]<BR /><BR /> DELIMS=","<BR /><BR /> FIELDS = "foo1", "foo2", "foo3", "foo4", "foo5",<BR /><BR /> Please kindly advise where i am missing. Thanks</P> Mon, 28 Sep 2020 15:04:03 GMT https://community.splunk.com/t5/Getting-Data-In/Getting-date-and-time-from-CSV/m-p/113865#M23827 psow_splunk 2020-09-28T15:04:03Z https://community.splunk.com/t5/Getting-Data-In/Getting-date-and-time-from-CSV/m-p/113866#M23828 <P>Well, your date format specifies "-", but the data you say uses "/".</P> <P>Also, indexed extractions only work on Splunk 6.0 and higher, not 5.</P> Thu, 24 Oct 2013 17:12:56 GMT https://community.splunk.com/t5/Getting-Data-In/Getting-date-and-time-from-CSV/m-p/113866#M23828 gkanapathy 2013-10-24T17:12:56Z