https://community.splunk.com/t5/Getting-Data-In/index-time-and-event-log-time-is-mismatching/m-p/416492#M95576 <P>We are getting events from one of our application ,But the indexed time and event logged time is different ,Please let me know how to fix this timestamp issues and not getting milliseconds in time.</P> <P>Event list below:</P> <P>Time Event<BR /> 2/27/19 { [-]<BR /> 6:24:31.000 PM @timestamp: 2019-02-27T18:19:59.757Z </P> <P>Props.conf </P> <P>[XXXXXX]<BR /> SHOULD_LINEMERGE=true<BR /> LINE_BREAKER=([\r\n]+)<BR /> NO_BINARY_CHECK=true<BR /> TIME_PREFIX=@timestamp":<BR /> TRUNCATE = 0</P> Tue, 29 Sep 2020 23:30:54 GMT RASHO 2020-09-29T23:30:54Z https://community.splunk.com/t5/Getting-Data-In/index-time-and-event-log-time-is-mismatching/m-p/416492#M95576 <P>We are getting events from one of our application ,But the indexed time and event logged time is different ,Please let me know how to fix this timestamp issues and not getting milliseconds in time.</P> <P>Event list below:</P> <P>Time Event<BR /> 2/27/19 { [-]<BR /> 6:24:31.000 PM @timestamp: 2019-02-27T18:19:59.757Z </P> <P>Props.conf </P> <P>[XXXXXX]<BR /> SHOULD_LINEMERGE=true<BR /> LINE_BREAKER=([\r\n]+)<BR /> NO_BINARY_CHECK=true<BR /> TIME_PREFIX=@timestamp":<BR /> TRUNCATE = 0</P> Tue, 29 Sep 2020 23:30:54 GMT https://community.splunk.com/t5/Getting-Data-In/index-time-and-event-log-time-is-mismatching/m-p/416492#M95576 RASHO 2020-09-29T23:30:54Z https://community.splunk.com/t5/Getting-Data-In/index-time-and-event-log-time-is-mismatching/m-p/416493#M95577 <P>Here are what seem to be the settings you're looking for:</P> <PRE><CODE>SHOULD_LINEMERGE=true LINE_BREAKER=([\r\n]+) NO_BINARY_CHECK=true TIME_PREFIX=(@timestamp) TIME_FORMAT=%Y-%m-%dT%H:%M:%D.%3Q MAX_TIMESTAMP_LOOKAHEAD=30 </CODE></PRE> <P>Let me know please</P> Wed, 27 Feb 2019 19:34:06 GMT https://community.splunk.com/t5/Getting-Data-In/index-time-and-event-log-time-is-mismatching/m-p/416493#M95577 tiagofbmm 2019-02-27T19:34:06Z