https://community.splunk.com/t5/Getting-Data-In/time-formating/m-p/189416#M37749 <P>we have a server that the time time is reporting in with an odd format, </P> <PRE><CODE>15/May/2015:15:20:38 -0400 </CODE></PRE> <P>how would i make the stanza to get Splunk to parse this correctly to something like 05/15/2015 03:20:38 PM?</P> Fri, 15 May 2015 20:19:56 GMT sbattista09 2015-05-15T20:19:56Z https://community.splunk.com/t5/Getting-Data-In/time-formating/m-p/189416#M37749 <P>we have a server that the time time is reporting in with an odd format, </P> <PRE><CODE>15/May/2015:15:20:38 -0400 </CODE></PRE> <P>how would i make the stanza to get Splunk to parse this correctly to something like 05/15/2015 03:20:38 PM?</P> Fri, 15 May 2015 20:19:56 GMT https://community.splunk.com/t5/Getting-Data-In/time-formating/m-p/189416#M37749 sbattista09 2015-05-15T20:19:56Z https://community.splunk.com/t5/Getting-Data-In/time-formating/m-p/189417#M37750 <P>TIME_FORMAT=%d/%b/%Y:%H:%M:%S -%3N</P> <P>Hope it can help you</P> Sat, 16 May 2015 03:42:24 GMT https://community.splunk.com/t5/Getting-Data-In/time-formating/m-p/189417#M37750 neelamssantosh 2015-05-16T03:42:24Z