Getting Data In

Best timestamp format

realsplunk
Motivator

Hello guys,
could you confirm Splunk handles best US format (MM/DD/YYYY or YYYY/MM/DD for instance) where month preceding day?

Thanks.

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Splunk handles US date formats best, particularly mm/dd/yyyy over dd/mm/yyyy. That said, the date format doesn't matter if you specify TIME_FORMAT in your props.conf file (which you should do always).

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Splunk handles US date formats best, particularly mm/dd/yyyy over dd/mm/yyyy. That said, the date format doesn't matter if you specify TIME_FORMAT in your props.conf file (which you should do always).

---
If this reply helps you, an upvote would be appreciated.
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...