Timeformat

[uagraw01]

Hello members,

Can you help me out to find out , what will be exact timeformat for this time below and timeprefix as well. 

[2021-01-29T08:05:10-05:00]

Thanks in advance.

[isoutamo]

Hi

%Y-%m-%dT%H:%M:%S%:z and prefix \[

https://docs.splunk.com/Documentation/Splunk/8.0.5/SearchReference/Commontimeformatvariables

r.Ismo

[gcusello]

Hi @uagraw01,

you could try:

TIME_PREFIX = \[
TIME_FORMAT = %Y-%m-%dT%H:%M_%S%:z

Ciao.

Giuseppe

[uagraw01]

@gcusello 

Why you use _%S here ? Is this the typo error or you will suggest the other one.

Y-%m-%dT%H:%M_%S%:z

[gcusello]

Hi @uagraw01,

sorry it was a typing error:

Y-%m-%dT%H:%M:%S%:z

Ciao.

Giuseppe