https://community.splunk.com/t5/Getting-Data-In/Splunk-Input-List-of-All-accepted-Default-Time-Formats/m-p/364183#M93805 <P>Is there a document or configuration file that spells out all of the accepted default time formats on input. In other words, what are ALL the date/time formats that are accepted if I do not specify a format string in props.conf?</P> Thu, 09 Nov 2017 15:05:47 GMT reed_kelly 2017-11-09T15:05:47Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Input-List-of-All-accepted-Default-Time-Formats/m-p/364183#M93805 <P>Is there a document or configuration file that spells out all of the accepted default time formats on input. In other words, what are ALL the date/time formats that are accepted if I do not specify a format string in props.conf?</P> Thu, 09 Nov 2017 15:05:47 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Input-List-of-All-accepted-Default-Time-Formats/m-p/364183#M93805 reed_kelly 2017-11-09T15:05:47Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Input-List-of-All-accepted-Default-Time-Formats/m-p/364184#M93806 <P>You really should specify TIME_FORMAT in props.conf for all your sourcetypes. It's a Splunk Best Practice.<BR /> Default time formats are in $SPLUNK_HOME/etc/datetime.xml.</P> Tue, 29 Sep 2020 16:40:54 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Input-List-of-All-accepted-Default-Time-Formats/m-p/364184#M93806 richgalloway 2020-09-29T16:40:54Z