https://community.splunk.com/t5/Getting-Data-In/Assistance-with-extracting-timestamp-from-log-file/m-p/168402#M34082 <P>I have some log files that have a diffrent time format than I have ran into before.<BR /> The log files timestamps look like this.<BR /> 5/14/2014^2:54:39:16^<BR /> Day/month/year^hour:min:sec:ms</P> <P>I can get the auto timestamp to recognize the Day/Month/year but has no idea how to look at the time. Can anyone suggest a strip time or props.conf regex to allow splunk to process this?</P> Fri, 16 May 2014 22:42:33 GMT matt4321 2014-05-16T22:42:33Z https://community.splunk.com/t5/Getting-Data-In/Assistance-with-extracting-timestamp-from-log-file/m-p/168402#M34082 <P>I have some log files that have a diffrent time format than I have ran into before.<BR /> The log files timestamps look like this.<BR /> 5/14/2014^2:54:39:16^<BR /> Day/month/year^hour:min:sec:ms</P> <P>I can get the auto timestamp to recognize the Day/Month/year but has no idea how to look at the time. Can anyone suggest a strip time or props.conf regex to allow splunk to process this?</P> Fri, 16 May 2014 22:42:33 GMT https://community.splunk.com/t5/Getting-Data-In/Assistance-with-extracting-timestamp-from-log-file/m-p/168402#M34082 matt4321 2014-05-16T22:42:33Z https://community.splunk.com/t5/Getting-Data-In/Assistance-with-extracting-timestamp-from-log-file/m-p/168403#M34083 <P>Does this work?</P> <PRE><CODE>TIME_FORMAT=%m/%d/%Y^%H:%M:%S:%f </CODE></PRE> <P>I dragged it out of an old Python spec.</P> Fri, 16 May 2014 23:26:10 GMT https://community.splunk.com/t5/Getting-Data-In/Assistance-with-extracting-timestamp-from-log-file/m-p/168403#M34083 lguinn2 2014-05-16T23:26:10Z https://community.splunk.com/t5/Getting-Data-In/Assistance-with-extracting-timestamp-from-log-file/m-p/168404#M34084 <P>Perfect that worked great!!</P> Fri, 16 May 2014 23:29:15 GMT https://community.splunk.com/t5/Getting-Data-In/Assistance-with-extracting-timestamp-from-log-file/m-p/168404#M34084 matt4321 2014-05-16T23:29:15Z