https://community.splunk.com/t5/Getting-Data-In/Syslog-event-timesteamp-not-display-in-correct-format-with-no/m-p/483690#M82865 <P>Do that at search time like this:</P> <PRE><CODE>... | fieldformat _time=strftime(strptime(_time, "%Y-%m-%dT%H:%M:%S%:Z"), "%m/%d/%Y %H:%M:%S") | ... </CODE></PRE> Fri, 15 Nov 2019 00:34:54 GMT richgalloway 2019-11-15T00:34:54Z https://community.splunk.com/t5/Getting-Data-In/Syslog-event-timesteamp-not-display-in-correct-format-with-no/m-p/483689#M82864 <P>Hi,</P> <P>How do I display the correct syslog event timestamp in Splunk.</P> <P>this is Syslog Event timestamp when display in Splunk with no_priority_stripping=true.</P> <P>2019-11-14T14:34:02-08:00</P> <P>I want to display like 11/14/2019 14:34:02</P> <P>Below is the syslog event message.</P> <P>&lt;134&gt;1 2019-11-14T14:34:02-08:00 CPM-1600-1-ECM-ITLAB server - - [meta sequenceId="39" enterpriseId="2634.1.17.16" vendorId="WTI"] CPM: CPM-1600-1-ECM-ITLAB, (AUDIT LOG) DATE-TIME: 11/14/19 14:34:02, USERNAME: super LOGOUT By /X SSH Port 22<BR /> host = CPM-1600-1-ECM-ITLAB source = udp:514 sourcetype = syslog</P> <P>Looking forward to someone that can help out to resolve this issue.</P> Wed, 30 Sep 2020 02:57:57 GMT https://community.splunk.com/t5/Getting-Data-In/Syslog-event-timesteamp-not-display-in-correct-format-with-no/m-p/483689#M82864 matoulas 2020-09-30T02:57:57Z https://community.splunk.com/t5/Getting-Data-In/Syslog-event-timesteamp-not-display-in-correct-format-with-no/m-p/483690#M82865 <P>Do that at search time like this:</P> <PRE><CODE>... | fieldformat _time=strftime(strptime(_time, "%Y-%m-%dT%H:%M:%S%:Z"), "%m/%d/%Y %H:%M:%S") | ... </CODE></PRE> Fri, 15 Nov 2019 00:34:54 GMT https://community.splunk.com/t5/Getting-Data-In/Syslog-event-timesteamp-not-display-in-correct-format-with-no/m-p/483690#M82865 richgalloway 2019-11-15T00:34:54Z