Getting Data In

Timeformat

uagraw01
Builder

Hello members,

 

Can you help me out to find out , what will be exact timeformat for this time below and timeprefix as well. 

[2021-01-29T08:05:10-05:00]

 

Thanks in advance.

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @uagraw01,

you could try:

TIME_PREFIX = \[
TIME_FORMAT = %Y-%m-%dT%H:%M_%S%:z

Ciao.

Giuseppe

0 Karma

uagraw01
Builder

@gcusello 

 

Why you use _%S here ? Is this the typo error or you will suggest the other one.

Y-%m-%dT%H:%M_%S%:z

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @uagraw01,

sorry it was a typing error:

Y-%m-%dT%H:%M:%S%:z

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...