Hi Team,
What is the Time_Format for
Tue Sep 17 12:43:09.925775 2019
I am not able to get it exactly from the below link
https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/Commontimeformatvariables
Hello @vijaysri ,
it should work with the current Splunk version automatically.
Alternatively you can set TIME_FORMAT=%a %b %d %H:%M:%S.%6N %Y
Hello @vijaysri ,
it should work with the current Splunk version automatically.
Alternatively you can set TIME_FORMAT=%a %b %d %H:%M:%S.%6N %Y
Hi,
Please try below config
TIME_FORMAT = %a %b %d %H:%M:%S.%6N %Y
Hi
Try this
| makeresults
| eval temp="Tue Sep 17 12:43:09.925775 2019"
| eval epoch=strptime(temp,"%a %b %d %H:%M:%S.%6Q %Y")
| eval output=strftime(epoch,"%a %b %d %H:%M:%S.%6Q %Y")