https://community.splunk.com/t5/Getting-Data-In/Extract-timestamp-syntax-multiple-format/m-p/46714#M8819 <P>In the following log.. </P> <P>[11.12.31 7:20:33:812 KST]<BR /> [12. 1. 1 4:40:31:410 KST]</P> <P>I can't extract timestamp. Anyone else having this problem?</P> Tue, 10 Jan 2012 03:52:29 GMT kjycls 2012-01-10T03:52:29Z https://community.splunk.com/t5/Getting-Data-In/Extract-timestamp-syntax-multiple-format/m-p/46714#M8819 <P>In the following log.. </P> <P>[11.12.31 7:20:33:812 KST]<BR /> [12. 1. 1 4:40:31:410 KST]</P> <P>I can't extract timestamp. Anyone else having this problem?</P> Tue, 10 Jan 2012 03:52:29 GMT https://community.splunk.com/t5/Getting-Data-In/Extract-timestamp-syntax-multiple-format/m-p/46714#M8819 kjycls 2012-01-10T03:52:29Z https://community.splunk.com/t5/Getting-Data-In/Extract-timestamp-syntax-multiple-format/m-p/46715#M8820 <P>I don't know what you're doing, but it would be helpful if you provided the timestamp format you're attempting. you can try this one:</P> <PRE><CODE>%y.%m.%d %H:%M:%S:%3N %Z </CODE></PRE> Tue, 10 Jan 2012 06:34:51 GMT https://community.splunk.com/t5/Getting-Data-In/Extract-timestamp-syntax-multiple-format/m-p/46715#M8820 gkanapathy 2012-01-10T06:34:51Z