Hello members,
Can you help me out to find out , what will be exact timeformat for this time below and timeprefix as well.
[2021-01-29T08:05:10-05:00]
Thanks in advance.
Hi
%Y-%m-%dT%H:%M:%S%:z and prefix \[
https://docs.splunk.com/Documentation/Splunk/8.0.5/SearchReference/Commontimeformatvariables
r.Ismo
Hi @uagraw01,
you could try:
TIME_PREFIX = \[ TIME_FORMAT = %Y-%m-%dT%H:%M_%S%:z
Ciao.
Giuseppe
@gcusello
Why you use _%S here ? Is this the typo error or you will suggest the other one.
Y-%m-%dT%H:%M_%S%:z
sorry it was a typing error:
Y-%m-%dT%H:%M:%S%:z
