I am trying to import a simple log file into Splunk. It seems to me that it should be easy, but it's not working. My log file looks like this: 2015-03-25T06:31:09.351320+00:00 nst-ms-m-mmp-dev-ui-01 process_manager[2462]: Starting up 2015-03-25T06:31:10.109330+00:00 nst-ms-m-mmp-dev-ui-01 monaco process_manager debug (periodic_task:start_task:138): Starting task pt_logging_periodic_check 2015-03-25T06:31:10.245144+00:00 nst-ms-m-mmp-dev-ui-01 monaco process_manager info Starting erlang component with PID 2462. 2015-03-25T06:31:10.245351+00:00 nst-ms-m-mmp-dev-ui-01 monaco process_manager debug (periodic_task:start_task:138): Starting task pt_force_garbage_collector ... When I import the files, I preview as "Unstructured data", set the line breaking to one event per line, and set the timestamp format to %Y-%m-%dT%H:%M:%S.%6N%z . I get no results. What am I missing? ... View more