What is the correct earliest_time format for searches when programmatically querying Splunk?

[the_wolverine]

I'm using Python SDK (or some other client) to query Splunk and its not accepting my date format. What is the correct format to specify for earliest_time?

[cmerriman]

here is a doc about it:

http://dev.splunk.com/view/SP-CAAAEE5#oneshotjo

"earliest_time": "2017-03-14T12:00:00.000-07:00"

[the_wolverine · Accepted solution]

earliest_time = YYYY-MM-DDTHH:MM:SS

Example: earliest_time = 2017-03-14T10:0:0