topic Time Format Help in Splunk Search

Time Format Help

AzmathShaik — Thu, 13 Aug 2020 16:12:35 GMT

Hello

i have log events with time format "2020-08-13 15:50:20 UTC+0000" and i have defined
TIME_FORMAT as %Y-%m-%d %H:%M:%S %Z

but still seeing Failed to parse timestamp warnings. can someone correct where am doing mistake?

gcusello — Thu, 13 Aug 2020 17:31:43 GMT

try this please:

%Y-%m-%d %H:%M:%S %Z%z

Ciao.

Giuseppe

gcusello — Tue, 22 Dec 2020 16:59:47 GMT

good for you,

Ciao and happy splunking.

Giuseppe

P.S. Karma Points are appreciated 😉