https://community.splunk.com/t5/Splunk-Search/Sub-Millisecond-timestamp-granularity/m-p/78135#M19769 <P>Splunk can store time down to a resolution of .000001 seconds if the input data supports it. You will likely have to specify a TIME_FORMAT to pick it up. See <A href="http://splunk-base.splunk.com/answers/1946/time_format-and-subseconds" target="_blank">http://splunk-base.splunk.com/answers/1946/time_format-and-subseconds</A></P> Mon, 28 Sep 2020 11:57:39 GMT dwaddle 2020-09-28T11:57:39Z https://community.splunk.com/t5/Splunk-Search/Sub-Millisecond-timestamp-granularity/m-p/78134#M19768 <P>I'm working on a rather novel use for Splunk at present; but it deals with aggregated logs with timestamps down to 0.1mS</P> <P>There is no problem getting the data, since we're picking up log files from a rotation, but I need to know if Splunk will index at this level of time interval</P> <P>Thanks </P> Tue, 19 Jun 2012 05:18:44 GMT https://community.splunk.com/t5/Splunk-Search/Sub-Millisecond-timestamp-granularity/m-p/78134#M19768 au_chrismor 2012-06-19T05:18:44Z https://community.splunk.com/t5/Splunk-Search/Sub-Millisecond-timestamp-granularity/m-p/78135#M19769 <P>Splunk can store time down to a resolution of .000001 seconds if the input data supports it. You will likely have to specify a TIME_FORMAT to pick it up. See <A href="http://splunk-base.splunk.com/answers/1946/time_format-and-subseconds" target="_blank">http://splunk-base.splunk.com/answers/1946/time_format-and-subseconds</A></P> Mon, 28 Sep 2020 11:57:39 GMT https://community.splunk.com/t5/Splunk-Search/Sub-Millisecond-timestamp-granularity/m-p/78135#M19769 dwaddle 2020-09-28T11:57:39Z