Security

How can I change the event time (_time) format in the Splunk web UI?

ianshefferman
Explorer

I'm looking to change the format of the default Time column on the left, containing the _time field, in the regular event view from search results. All the answers I've seen cover changing the locale, but instead I want to remove all milliseconds. None of my logs record to millisecond precision so I'd prefer to just remove them globally if at all possible. I'd like to change the global time format to "%m/%d/%y %I:%M:%S %p". Also, I only want/need to change this in the web UI.

I don't mind editing some of the files by hand as this is just a personal installation of Splunk.

I am running 6.1.2.

Tags (3)

somesoni2
Revered Legend
0 Karma

strive
Influencer
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...