topic Re: Time part is discarding in Splunk Search https://community.splunk.com/t5/Splunk-Search/Time-part-is-discarding/m-p/509522#M142402 <P>try <STRONG>kv&nbsp;</STRONG>before <STRONG>stats</STRONG></P> Thu, 16 Jul 2020 13:39:55 GMT to4kawa 2020-07-16T13:39:55Z Time part is discarding https://community.splunk.com/t5/Splunk-Search/Time-part-is-discarding/m-p/509497#M142389 <P>I have a timestamp variable&nbsp;&nbsp;<STRONG>EmailSendAt=<SPAN class="t"><SPAN class="t h">2020</SPAN>-07-15</SPAN> <SPAN class="t">05:52:13.186</SPAN>&nbsp;,&nbsp;</STRONG></P><P>Whenever I am using<BR /><STRONG>stats value(EmailSendAt) as time..</STRONG></P><P>It shows me only Date part.. Time part is discarding. (I used table also but no change happen)</P> Thu, 16 Jul 2020 11:16:05 GMT https://community.splunk.com/t5/Splunk-Search/Time-part-is-discarding/m-p/509497#M142389 sheshanath 2020-07-16T11:16:05Z Re: Time part is discarding https://community.splunk.com/t5/Splunk-Search/Time-part-is-discarding/m-p/509499#M142391 <LI-CODE lang="markup">index=_internal |head 1| fields _raw _time | eval _raw="EmailSendAt=2020-07-15 05:52:13.186 , " | rename COMMENT as "the logic" | kv</LI-CODE><P>your fields extractions is wrong. try <STRONG>kv</STRONG></P> Thu, 16 Jul 2020 11:19:54 GMT https://community.splunk.com/t5/Splunk-Search/Time-part-is-discarding/m-p/509499#M142391 to4kawa 2020-07-16T11:19:54Z Re: Time part is discarding https://community.splunk.com/t5/Splunk-Search/Time-part-is-discarding/m-p/509502#M142393 <P><STRONG>EmailSendAt</STRONG> is a field and whenever I pull this field with by&nbsp;</P><P><STRONG>stats values(EmailSendAt) as time</STRONG> .... it shows only date part.</P><P>&nbsp;</P><P>For example suppose&nbsp;</P><PRE>EmailSendAt=2020-07-15 05:52:13.186</PRE><P>then using&nbsp;&nbsp;<STRONG>stats values(EmailSendAt) as time&nbsp;</STRONG> only shows me date part. Please help</P><P>.</P><P>Thanks&nbsp;</P> Thu, 16 Jul 2020 11:51:28 GMT https://community.splunk.com/t5/Splunk-Search/Time-part-is-discarding/m-p/509502#M142393 sheshanath 2020-07-16T11:51:28Z Re: Time part is discarding https://community.splunk.com/t5/Splunk-Search/Time-part-is-discarding/m-p/509522#M142402 <P>try <STRONG>kv&nbsp;</STRONG>before <STRONG>stats</STRONG></P> Thu, 16 Jul 2020 13:39:55 GMT https://community.splunk.com/t5/Splunk-Search/Time-part-is-discarding/m-p/509522#M142402 to4kawa 2020-07-16T13:39:55Z