Getting Data In

Timeformat

uagraw01
Communicator

Hello members,

 

Can you help me out to find out , what will be exact timeformat for this time below and timeprefix as well. 

[2021-01-29T08:05:10-05:00]

 

Thanks in advance.

Labels (1)
0 Karma

soutamo
SplunkTrust
SplunkTrust
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @uagraw01,

you could try:

TIME_PREFIX = \[
TIME_FORMAT = %Y-%m-%dT%H:%M_%S%:z

Ciao.

Giuseppe

0 Karma

uagraw01
Communicator

@gcusello 

 

Why you use _%S here ? Is this the typo error or you will suggest the other one.

Y-%m-%dT%H:%M_%S%:z

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @uagraw01,

sorry it was a typing error:

Y-%m-%dT%H:%M:%S%:z

Ciao.

Giuseppe

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!