Hello Dear Splunkers 🙂 Recently we got reported issue when our indexers are reporting multiple issues with timestamp extraction. I found out that one log file (with dedicated sourcetype) has multiple different formats of time. Therefore we are not able determine correct configuration for sourcetype iin props.conf  Beginning of those events look like this: 1. 2021-03-22T16:15:31.995+0800 2. [DEBUG] 2021-03-22 16:15:32.075 3. <2021-03-22T02:15:29.217 CST> Its input from *.stdout log file therefore there is a lot of different types of events. I would like to skip letter "T" in time format definition but sadly I did not find anything that can help us. Anybody dealt with situation like this? Many thanks  Denis   The biggest problem seems to be in letter "T". ... View more