Getting Data In

_time different format???

kailun92
Communicator

I have two computer running the same code and I have a set of date but all is in the format of

alt text

How can I set the time to become like this

alt text

Can someone guide me with this ?

Tags (2)
0 Karma
1 Solution

linu1988
Champion

Hello Kailun,
from your case i can tell your time is appropriately recognized from the events. You just need to re-format it.

Please follow the "Reconfigure how timestamps appear in raw data" part in the below documentation:

http://docs.splunk.com/Documentation/Splunk/5.0.4/Data/Configuretimestamprecognition

View solution in original post

linu1988
Champion

Hello Kailun,
from your case i can tell your time is appropriately recognized from the events. You just need to re-format it.

Please follow the "Reconfigure how timestamps appear in raw data" part in the below documentation:

http://docs.splunk.com/Documentation/Splunk/5.0.4/Data/Configuretimestamprecognition

gooza
Communicator
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...