https://community.splunk.com/t5/Splunk-Search/What-is-the-correct-strptime-argument/m-p/642408#M222535 <P>Perfect thank you! It was the %Q i was missing. Much appreciated.</P> Fri, 05 May 2023 14:37:29 GMT superisk 2023-05-05T14:37:29Z https://community.splunk.com/t5/Splunk-Search/What-is-the-correct-strptime-argument/m-p/642405#M222532 <P>Hi all,</P> <P>I am confident with strptime/strftime but i'm really struggling with the correct strptime argument for the following date/time format -</P> <P>2023-01-25T21:32:04:501+0000</P> <P>The T between date and time is causing me issues. Thank you in advance!</P> Fri, 05 May 2023 15:30:11 GMT https://community.splunk.com/t5/Splunk-Search/What-is-the-correct-strptime-argument/m-p/642405#M222532 superisk 2023-05-05T15:30:11Z https://community.splunk.com/t5/Splunk-Search/What-is-the-correct-strptime-argument/m-p/642406#M222533 <P>Are you getting an error? Adding a "T" in the format is allowed, the following works for me:</P><LI-CODE lang="markup">| makeresults | eval example="2023-01-25T21:32:04:501+0000" | eval parsed_dt=strptime(example, "%Y-%m-%dT%H:%M:%S:%Q%z") | eval parsed_s=strftime(parsed_dt, "%Y-%m-%dT%H:%M:%S:%Q%z")</LI-CODE> Fri, 05 May 2023 13:36:13 GMT https://community.splunk.com/t5/Splunk-Search/What-is-the-correct-strptime-argument/m-p/642406#M222533 rut 2023-05-05T13:36:13Z https://community.splunk.com/t5/Splunk-Search/What-is-the-correct-strptime-argument/m-p/642408#M222535 <P>Perfect thank you! It was the %Q i was missing. Much appreciated.</P> Fri, 05 May 2023 14:37:29 GMT https://community.splunk.com/t5/Splunk-Search/What-is-the-correct-strptime-argument/m-p/642408#M222535 superisk 2023-05-05T14:37:29Z