Getting Data In

Splunk Set Source Type format Timestamp strptime field examples

bogdan_nicolesc
Communicator

Hi all,

I'm trying hard to add data into Splunk from a .csv file instead of .json. I managed to convert it from .json to .csv and now, when i try to alter <Timestamp format > using strptime() is showing me time from the adding time, not the time from the field time inside the .csv that is in Epoch Unix Timestamp.

I have read this resource,  https://docs.splunk.com/Documentation/SplunkCloud/8.2.2107/Data/Configuretimestamprecognition

but to no avail ...

Please advice ...

 

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Please share and example of the csv and the configuration you are using to ingest it

0 Karma

bogdan_nicolesc
Communicator

As you can clearly see, in the first photo is my .csv field setup with times resembling as 1632177107637870.

 

The second photo, is how i want to import it.

0 Karma
Get Updates on the Splunk Community!

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...