<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Event time discrepancy in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Event-time-discrepancy/m-p/571678#M199208</link>
    <description>&lt;P&gt;When searching through certain sour ectypes and indexes, seeing a discrepancy between time and date for event time. Suggestions welcomed on diagnosing this issue.&lt;/P&gt;&lt;P&gt;Thanks in advance.&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="Time.JPG" style="width: 410px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/16506i2B68F9971D1B8EA0/image-size/large?v=v2&amp;amp;px=999" role="button" title="Time.JPG" alt="Time.JPG" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Wed, 20 Oct 2021 14:57:20 GMT</pubDate>
    <dc:creator>nbrazier21</dc:creator>
    <dc:date>2021-10-20T14:57:20Z</dc:date>
    <item>
      <title>Event time discrepancy</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Event-time-discrepancy/m-p/571678#M199208</link>
      <description>&lt;P&gt;When searching through certain sour ectypes and indexes, seeing a discrepancy between time and date for event time. Suggestions welcomed on diagnosing this issue.&lt;/P&gt;&lt;P&gt;Thanks in advance.&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="Time.JPG" style="width: 410px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/16506i2B68F9971D1B8EA0/image-size/large?v=v2&amp;amp;px=999" role="button" title="Time.JPG" alt="Time.JPG" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 20 Oct 2021 14:57:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Event-time-discrepancy/m-p/571678#M199208</guid>
      <dc:creator>nbrazier21</dc:creator>
      <dc:date>2021-10-20T14:57:20Z</dc:date>
    </item>
    <item>
      <title>Re: Event time discrepancy</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Event-time-discrepancy/m-p/571688#M199211</link>
      <description>&lt;P&gt;I would start by looking at timestamp parsing configuration for those sourcetypes.&amp;nbsp;&lt;/P&gt;&lt;P&gt;Reference: &lt;A href="https://docs.splunk.com/Documentation/SplunkCloud/latest/Data/Configuretimestamprecognition" target="_blank"&gt;https://docs.splunk.com/Documentation/SplunkCloud/latest/Data/Configuretimestamprecognition&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 20 Oct 2021 15:57:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Event-time-discrepancy/m-p/571688#M199211</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2021-10-20T15:57:16Z</dc:date>
    </item>
  </channel>
</rss>

