https://community.splunk.com/t5/Splunk-Search/Timestamp-Optimization-Tools/m-p/436453#M124395 <P>All, </P> <P>Any cool tools out there for optimization and tuning of time stamps? Like a regex101.com style site but like for strptime? </P> <P>thanks, <BR /> -Daniel </P> Wed, 01 May 2019 18:18:36 GMT daniel333 2019-05-01T18:18:36Z https://community.splunk.com/t5/Splunk-Search/Timestamp-Optimization-Tools/m-p/436453#M124395 <P>All, </P> <P>Any cool tools out there for optimization and tuning of time stamps? Like a regex101.com style site but like for strptime? </P> <P>thanks, <BR /> -Daniel </P> Wed, 01 May 2019 18:18:36 GMT https://community.splunk.com/t5/Splunk-Search/Timestamp-Optimization-Tools/m-p/436453#M124395 daniel333 2019-05-01T18:18:36Z https://community.splunk.com/t5/Splunk-Search/Timestamp-Optimization-Tools/m-p/436454#M124396 <P><A href="http://strftime.net/">http://strftime.net/</A> - although it has a few missing options you might find in strptime, it's a good way to play with time formats.</P> <P>And as an aside, if you're using rsyslog, comment out the $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat line. It'll set your timestamps to RFC3339 standard format...</P> Wed, 01 May 2019 18:25:12 GMT https://community.splunk.com/t5/Splunk-Search/Timestamp-Optimization-Tools/m-p/436454#M124396 vliggio 2019-05-01T18:25:12Z