https://community.splunk.com/t5/Getting-Data-In/Why-is-the-timestamp-column-missing-Search-included-quot-index/m-p/355231#M64956 <P>It could be the view you have for your search. There are 3 possible views: Raw, List, and Table. If you have your view in Raw it will not show the "Time" column. Typically the view you will want is "List", </P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/4049i002B7E46AB51B981/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/4050iDB134E6189009D0F/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Thu, 21 Dec 2017 19:30:31 GMT mdsnmss 2017-12-21T19:30:31Z https://community.splunk.com/t5/Getting-Data-In/Why-is-the-timestamp-column-missing-Search-included-quot-index/m-p/355230#M64955 <P>timestamp column is missing in splunk . While I am searching index=index_name. first column should be with time-stamp, but that is missing. what could be the reason.</P> Thu, 21 Dec 2017 14:30:11 GMT https://community.splunk.com/t5/Getting-Data-In/Why-is-the-timestamp-column-missing-Search-included-quot-index/m-p/355230#M64955 rhirasin 2017-12-21T14:30:11Z https://community.splunk.com/t5/Getting-Data-In/Why-is-the-timestamp-column-missing-Search-included-quot-index/m-p/355231#M64956 <P>It could be the view you have for your search. There are 3 possible views: Raw, List, and Table. If you have your view in Raw it will not show the "Time" column. Typically the view you will want is "List", </P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/4049i002B7E46AB51B981/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/4050iDB134E6189009D0F/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Thu, 21 Dec 2017 19:30:31 GMT https://community.splunk.com/t5/Getting-Data-In/Why-is-the-timestamp-column-missing-Search-included-quot-index/m-p/355231#M64956 mdsnmss 2017-12-21T19:30:31Z https://community.splunk.com/t5/Getting-Data-In/Why-is-the-timestamp-column-missing-Search-included-quot-index/m-p/355232#M64957 <P>@rhirasin can you add the raw sample data and also what is the query you are using.</P> <P>When you run just the base search <CODE>index=&lt;YourIndexName&gt;</CODE> are you not seeing the Time field? Because that would be very odd. For data inserted to Splunk index the <CODE>Time</CODE> field should have event timestamp and <CODE>Event</CODE> field should have complete _raw data.</P> <P>Please add few sample events for us to assist you.</P> Thu, 21 Dec 2017 19:53:06 GMT https://community.splunk.com/t5/Getting-Data-In/Why-is-the-timestamp-column-missing-Search-included-quot-index/m-p/355232#M64957 niketn 2017-12-21T19:53:06Z