https://community.splunk.com/t5/Splunk-Search/Extract-date-and-time-in-a-specific-format/m-p/246671#M189101 <P>You would specify this in props.conf for your sourcetype:</P> <PRE><CODE>TIME_FORMAT = %d.%m.%Y;%H%M%S%3N </CODE></PRE> Thu, 26 Nov 2015 20:12:49 GMT martin_mueller 2015-11-26T20:12:49Z https://community.splunk.com/t5/Splunk-Search/Extract-date-and-time-in-a-specific-format/m-p/246670#M189100 <P>Hi, </P> <P>I'm trying to figure out how to extract date and time in a specific format.<BR /> The date in the logs are in this format.</P> <PRE><CODE>26.11.2015;193245932 </CODE></PRE> <P>The format is dd.MM.yyyy;hhmmssSSS</P> <P>Am I able to specify how this field should be interpreted?<BR /> And if YES, how do I need to do this?</P> <P>Thanks in advance!</P> <P>Regards,<BR /> pyro_wood</P> Thu, 26 Nov 2015 19:16:37 GMT https://community.splunk.com/t5/Splunk-Search/Extract-date-and-time-in-a-specific-format/m-p/246670#M189100 horsefez 2015-11-26T19:16:37Z https://community.splunk.com/t5/Splunk-Search/Extract-date-and-time-in-a-specific-format/m-p/246671#M189101 <P>You would specify this in props.conf for your sourcetype:</P> <PRE><CODE>TIME_FORMAT = %d.%m.%Y;%H%M%S%3N </CODE></PRE> Thu, 26 Nov 2015 20:12:49 GMT https://community.splunk.com/t5/Splunk-Search/Extract-date-and-time-in-a-specific-format/m-p/246671#M189101 martin_mueller 2015-11-26T20:12:49Z https://community.splunk.com/t5/Splunk-Search/Extract-date-and-time-in-a-specific-format/m-p/246672#M189102 <P>Thank you very much! <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Thu, 26 Nov 2015 20:55:42 GMT https://community.splunk.com/t5/Splunk-Search/Extract-date-and-time-in-a-specific-format/m-p/246672#M189102 horsefez 2015-11-26T20:55:42Z