Unable to parse timestamp from xml tag

[v2k007]

I am facing problem with timestamp from xml file entry.
Following is the sample tag from xml file

 <row Id="82949" UserId="3893" Name="Teacher" Date="2008-09-15T08:55:03.957" />

I have specified following timeformat and timeprefix to detect timestamp.

Timestamp format = %Y-%m-%d'T'%H:%M:%S.%3N
Timestamp prefix = \d{4}-\d{2}-\d{2}+T\d{2}:\d{2}:\d{2}.\d{3}

I am getting following error could not use strptime to parse timestamp from "" />"

I am new to Splunk, so help on this issue is really appreciated. Thanks in advance.

[v2k007]

It worked 🙂 Thanks somesoni2 and cpetterborg

[cpetterborg · Accepted solution]

The prefix is what comes BEFORE the timestamp:

Timestamp prefix = Date="

[somesoni2]

First remove single quote from time fromat and dont use time prefix.