https://community.splunk.com/t5/Getting-Data-In/Time-format-throwing-error/m-p/292870#M55780 <P>Try with <CODE>TIME_FORMAT as "%Y-%m-%dT%H:%M:%S.%3N%Z"</CODE></P> Tue, 10 Oct 2017 19:22:24 GMT s2_splunk 2017-10-10T19:22:24Z https://community.splunk.com/t5/Getting-Data-In/Time-format-throwing-error/m-p/292869#M55779 <P>Hello All,</P> <P>i have a sourcetype with timestamp as <STRONG>"2017-10-10T18:55:47.425Z"</STRONG> and i defined TIME_FORMAT as <STRONG>"%Y-%m-%dT%H:%M:%S.%3%Z"</STRONG> but seems to be issue am getting the following error</P> <P>Bad strptime format value: '%Y-%m-%dT%H:%M:%S.%3%Z', of param: props.conf / [] / TIME_FORMAT.</P> <P>can anyone help me in correcting it?</P> Tue, 10 Oct 2017 19:18:35 GMT https://community.splunk.com/t5/Getting-Data-In/Time-format-throwing-error/m-p/292869#M55779 saifuddin9122 2017-10-10T19:18:35Z https://community.splunk.com/t5/Getting-Data-In/Time-format-throwing-error/m-p/292870#M55780 <P>Try with <CODE>TIME_FORMAT as "%Y-%m-%dT%H:%M:%S.%3N%Z"</CODE></P> Tue, 10 Oct 2017 19:22:24 GMT https://community.splunk.com/t5/Getting-Data-In/Time-format-throwing-error/m-p/292870#M55780 s2_splunk 2017-10-10T19:22:24Z