How to set the timestamp format to YYYY-MM-DD?

[dennisaraujo]

I need to use the field email sent to YYYY-MM-DD format for timestamp.
How to set the timestamp for the YYYY-MM-DD format?

Thanks.

[phadnett_splunk · Accepted solution]

Try using the following in props.conf for your sourcetype:
TIME_FORMAT = %Y-%m-%d

[dennisaraujo]

Worked, thank you.

[ddrillic]

Maybe an example of what you are trying to do?

[dennisaraujo]

In the file I have the email sent field, filled with date in yyyy-mm-dd format, I use this field as a timestamp to index the file.

[somesoni2]

You'd need to configure this in your props.conf for the sourcetype assigned to this data. To enable us to help you with more accurate solution, provide some sample log entries that you're trying to configure...