https://community.splunk.com/t5/Getting-Data-In/time-different-format/m-p/25863#M4236 <P>Hello Kailun, <BR /> from your case i can tell your time is appropriately recognized from the events. You just need to re-format it.</P> <P>Please follow the "Reconfigure how timestamps appear in raw data" part in the below documentation:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.4/Data/Configuretimestamprecognition">http://docs.splunk.com/Documentation/Splunk/5.0.4/Data/Configuretimestamprecognition</A></P> Tue, 06 Aug 2013 07:13:55 GMT linu1988 2013-08-06T07:13:55Z https://community.splunk.com/t5/Getting-Data-In/time-different-format/m-p/25860#M4233 <P>I have two computer running the same code and I have a set of date but all is in the format of </P> <P><IMG src="http://splunk-base.splunk.com//storage/asdjkldlkjs.png" alt="alt text" /></P> <P>How can I set the time to become like this </P> <P><IMG src="http://splunk-base.splunk.com//storage/Untitled_27.png" alt="alt text" /></P> <P>Can someone guide me with this ?</P> Tue, 06 Aug 2013 06:04:58 GMT https://community.splunk.com/t5/Getting-Data-In/time-different-format/m-p/25860#M4233 kailun92 2013-08-06T06:04:58Z https://community.splunk.com/t5/Getting-Data-In/time-different-format/m-p/25861#M4234 <P>Modify props.conf, these links may help you</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.4/admin/Propsconf">http://docs.splunk.com/Documentation/Splunk/5.0.4/admin/Propsconf</A></P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.4/Data/Configuretimestamprecognition">http://docs.splunk.com/Documentation/Splunk/5.0.4/Data/Configuretimestamprecognition</A></P> Tue, 06 Aug 2013 06:24:55 GMT https://community.splunk.com/t5/Getting-Data-In/time-different-format/m-p/25861#M4234 kml_uvce 2013-08-06T06:24:55Z https://community.splunk.com/t5/Getting-Data-In/time-different-format/m-p/25862#M4235 <P>change the URL <A href="https://mysplunk:8000/en-US/">https://mysplunk:8000/en-US/</A></P> Tue, 06 Aug 2013 06:53:42 GMT https://community.splunk.com/t5/Getting-Data-In/time-different-format/m-p/25862#M4235 gooza 2013-08-06T06:53:42Z https://community.splunk.com/t5/Getting-Data-In/time-different-format/m-p/25863#M4236 <P>Hello Kailun, <BR /> from your case i can tell your time is appropriately recognized from the events. You just need to re-format it.</P> <P>Please follow the "Reconfigure how timestamps appear in raw data" part in the below documentation:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.4/Data/Configuretimestamprecognition">http://docs.splunk.com/Documentation/Splunk/5.0.4/Data/Configuretimestamprecognition</A></P> Tue, 06 Aug 2013 07:13:55 GMT https://community.splunk.com/t5/Getting-Data-In/time-different-format/m-p/25863#M4236 linu1988 2013-08-06T07:13:55Z