<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Time format in Alerting</title>
    <link>https://community.splunk.com/t5/Alerting/Time-format/m-p/670759#M15570</link>
    <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/263001"&gt;@azteksites&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I am still confused for 00:00 (for last two pattern )&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="uagraw01_0-1701753929561.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/28366iE71B89839E5200A3/image-size/medium?v=v2&amp;amp;px=400" role="button" title="uagraw01_0-1701753929561.png" alt="uagraw01_0-1701753929561.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 05 Dec 2023 05:26:24 GMT</pubDate>
    <dc:creator>LogUx</dc:creator>
    <dc:date>2023-12-05T05:26:24Z</dc:date>
    <item>
      <title>Time format</title>
      <link>https://community.splunk.com/t5/Alerting/Time-format/m-p/670751#M15566</link>
      <description>&lt;P class="lia-align-left"&gt;Please help me to get the time format for the below string in &lt;STRONG&gt;props.conf.&lt;/STRONG&gt; I am confused with the last three patterns (533+00:00)&lt;/P&gt;&lt;P class="lia-align-left"&gt;&amp;nbsp;&lt;/P&gt;&lt;P class="lia-align-left"&gt;2023-12-05T04:21:21,533+00:00&lt;/P&gt;&lt;P class="lia-align-left"&gt;&amp;nbsp;&lt;/P&gt;&lt;P class="lia-align-left"&gt;Thanks in advance.&lt;/P&gt;</description>
      <pubDate>Tue, 05 Dec 2023 04:53:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Time-format/m-p/670751#M15566</guid>
      <dc:creator>LogUx</dc:creator>
      <dc:date>2023-12-05T04:53:27Z</dc:date>
    </item>
    <item>
      <title>Re: Time format</title>
      <link>https://community.splunk.com/t5/Alerting/Time-format/m-p/670753#M15567</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/70277"&gt;@LogUx&lt;/a&gt;&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;it seems ,533 is milliseconds&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;2023-12-05T04:21:21,533+00:00&lt;BR /&gt;&lt;BR /&gt;%Y-%m-%dT%H:%S,%3Q+00:00&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 05 Dec 2023 05:09:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Time-format/m-p/670753#M15567</guid>
      <dc:creator>SanjayReddy</dc:creator>
      <dc:date>2023-12-05T05:09:13Z</dc:date>
    </item>
    <item>
      <title>Re: Time format</title>
      <link>https://community.splunk.com/t5/Alerting/Time-format/m-p/670754#M15568</link>
      <description>&lt;P&gt;Thanks for the answer .&lt;/P&gt;&lt;P&gt;By the way have you missed %M ?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;should be like this: %Y-%m-%dT%H:%M:%S,%3Q+00:00&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 05 Dec 2023 05:27:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Time-format/m-p/670754#M15568</guid>
      <dc:creator>LogUx</dc:creator>
      <dc:date>2023-12-05T05:27:08Z</dc:date>
    </item>
    <item>
      <title>Re: Time format</title>
      <link>https://community.splunk.com/t5/Alerting/Time-format/m-p/670755#M15569</link>
      <description>&lt;P&gt;You can try the following TIME_FORMAT value to parse the timestamp,&lt;/P&gt;&lt;PRE&gt;TIME_FORMAT = %Y-%m-%dT%H:%M:%S,%&lt;SPAN class=""&gt;3&lt;/SPAN&gt;N%z&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 05 Dec 2023 05:22:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Time-format/m-p/670755#M15569</guid>
      <dc:creator>azteksites</dc:creator>
      <dc:date>2023-12-05T05:22:58Z</dc:date>
    </item>
    <item>
      <title>Re: Time format</title>
      <link>https://community.splunk.com/t5/Alerting/Time-format/m-p/670759#M15570</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/263001"&gt;@azteksites&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I am still confused for 00:00 (for last two pattern )&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="uagraw01_0-1701753929561.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/28366iE71B89839E5200A3/image-size/medium?v=v2&amp;amp;px=400" role="button" title="uagraw01_0-1701753929561.png" alt="uagraw01_0-1701753929561.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 05 Dec 2023 05:26:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Time-format/m-p/670759#M15570</guid>
      <dc:creator>LogUx</dc:creator>
      <dc:date>2023-12-05T05:26:24Z</dc:date>
    </item>
    <item>
      <title>Re: Time format</title>
      <link>https://community.splunk.com/t5/Alerting/Time-format/m-p/670760#M15571</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/70277"&gt;@LogUx&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;00:00 is an offset from UTC. The %z value should parse this in -/+HHMM format.&lt;/P&gt;</description>
      <pubDate>Tue, 05 Dec 2023 05:50:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Time-format/m-p/670760#M15571</guid>
      <dc:creator>azteksites</dc:creator>
      <dc:date>2023-12-05T05:50:45Z</dc:date>
    </item>
  </channel>
</rss>

