https://community.splunk.com/t5/Splunk-Search/Format-a-log-message-with-a-timestamp/m-p/100831#M26032 <P>Why sometimes the value of the timestamp is none when i add events to the splunk server?<BR /> "In most cases, Splunk will do the right thing with timestamps, but there are situations where you might need to configure timestamp handling." Is that the reason why?</P> Mon, 26 Mar 2012 06:41:15 GMT misteryuku 2012-03-26T06:41:15Z https://community.splunk.com/t5/Splunk-Search/Format-a-log-message-with-a-timestamp/m-p/100829#M26030 <P>How do i format a log message with a timestamp so that when i send the log message to the splunk server i am able to see the timestamp when i open up the search app.</P> Mon, 26 Mar 2012 04:19:31 GMT https://community.splunk.com/t5/Splunk-Search/Format-a-log-message-with-a-timestamp/m-p/100829#M26030 misteryuku 2012-03-26T04:19:31Z https://community.splunk.com/t5/Splunk-Search/Format-a-log-message-with-a-timestamp/m-p/100830#M26031 <P>Most events don't require any special timestamp handling. Splunk automatically recognizes and extracts their timestamps...</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/4.3.1/Data/Configuretimestamprecognition">Configure timestamp recognition</A></P> Mon, 26 Mar 2012 06:09:54 GMT https://community.splunk.com/t5/Splunk-Search/Format-a-log-message-with-a-timestamp/m-p/100830#M26031 MarioM 2012-03-26T06:09:54Z https://community.splunk.com/t5/Splunk-Search/Format-a-log-message-with-a-timestamp/m-p/100831#M26032 <P>Why sometimes the value of the timestamp is none when i add events to the splunk server?<BR /> "In most cases, Splunk will do the right thing with timestamps, but there are situations where you might need to configure timestamp handling." Is that the reason why?</P> Mon, 26 Mar 2012 06:41:15 GMT https://community.splunk.com/t5/Splunk-Search/Format-a-log-message-with-a-timestamp/m-p/100831#M26032 misteryuku 2012-03-26T06:41:15Z https://community.splunk.com/t5/Splunk-Search/Format-a-log-message-with-a-timestamp/m-p/100832#M26033 <P>The timestamp created is at the left hand side of the event row. is that it?</P> Mon, 26 Mar 2012 06:46:52 GMT https://community.splunk.com/t5/Splunk-Search/Format-a-log-message-with-a-timestamp/m-p/100832#M26033 misteryuku 2012-03-26T06:46:52Z https://community.splunk.com/t5/Splunk-Search/Format-a-log-message-with-a-timestamp/m-p/100833#M26034 <P>yes that's the timestamp splunk assigned to the event.<BR /> some rare occasions you need to point to splunk where is the timestamp and what format,you do that as per the link i put in my answer.</P> Thu, 05 Apr 2012 12:02:39 GMT https://community.splunk.com/t5/Splunk-Search/Format-a-log-message-with-a-timestamp/m-p/100833#M26034 MarioM 2012-04-05T12:02:39Z