@oscar84x Hi , My timestamp in data looks like: 2020-07-02T18:00:18+02:00 with name last_modified_date which i want to be extracted i have written below props.conf: [_json] INDEXED_EXTRACTIONS = json KV_MODE = none AUTO_KV_JSON = false NO_BINARY_CHECK = true SHOULD_LINEMERGE = false TIMESTAMP_FIELDS = last_modified_date TIME_FORMAT = %Y-%m-%dT%H:%M:%S+%2N:%2N MAX_TIMESTAMP_LOOKAHEAD = 25 and getting time extracted as : 7/2/20 6:00:18.020 PM but I want the time field extracted in same way as in data with + value as well like: 7/2/20 6:00:18+02:00 PM Please let me know what i am doing wrong as i am not getting expected output with + value. Note: this +02:00 value is fixed with every timestamp in data . Here’s my sample log data: {"_timestamp":"2020-07-02 18:00:46","_ver":"2","asset_ name":"","assigned_group":" Troubleshooting - Tier 2","assignee":"Buhle Mahlaba","ci":"","cause":""," city":"","client_type":""," closed_date":"","closure_ source":"","company":"MTN BUSINESS","contact_phone":""," contact_site":"","country":"", "created_from_template":""," customer_phone":"###"," customer_site":"INTERNET SOLUTIONS(PTY) LTD","debtor_code":"MTN000"," direct_contact_city":""," direct_contact_company":""," direct_contact_corporate_id":" ","direct_contact_country":"", "direct_contact_country_code": "","direct_contact_department" :"","direct_contact_desk_ location":"","direct_contact_ extension":"","direct_contact_ first_name":"","direct_ contact_internet_email":""," direct_contact_last_name":""," direct_contact_local_number":" ","direct_contact_location_ details":"","direct_contact_ middle_initial":"","direct_ contact_organization":""," direct_contact_region":""," direct_contact_site_group":"", "direct_contact_state_ province":"","direct_contact_ street":"","direct_contact_ time_zone":"","direct_contact_ zip_postal_code":"","first_ name":"Melvern","impact":"2- Significant\/Large","incident_ id":"MTNB00001289400"," incident_type":"User Service Restoration","last_ acknowledged_date":"","last_ modified_by":"412877","last_ modified_date":"2020-07-02T18: 00:44+02:00","last_name":" Banoo","last_resolved_date":"" ,"middle_name":"","notes":"HI Team\n\nThe mentioned link is down ,Please investigate and advise.\n\n\nRP\/0\/RSP0\/ CPU0:mi-za-bry-mspe4#sho log | inc BVI906\nRP\/0\/RSP0\/CPU0:Jul 2 14:43:49.894 SAST: mpls_ldp[1204]: %ROUTING-LDP-5-HELLO_ADJ_ CHANGE : VRF 'default' (0x60000000), Link hello adja...","operational_ categorization_tier_1":"TES_ Link","operational_ categorization_tier_2":" Microwave PTP","operational_ categorization_tier_3":"Link Down","owner_group":"General Support","priority":"Critical" ,"product_categorization_tier_ 1":"TES_Managed Networks","product_ categorization_tier_2":"Access Service","product_ categorization_tier_3":"Cloud Connect","product_name":""," region":"","reported_date":" 2020-07-02T16:36:04+02:00"," reported_source":"Email"," resolution":"","resolution_ categorization_tier_1":""," resolution_categorization_ tier_2":"","resolution_ categorization_tier_3":""," resolution_product_ categorization_tier_1":""," resolution_product_ categorization_tier_2":""," resolution_product_ categorization_tier_3":""," responded_date":"2020-07- 02T18:00:43+02:00","slm_real_ time_status":"Within the Service Target","satisfaction_rating": "","service_manager":""," service_request_id":"","site_ group":"","state_province":"", "status":"In Progress","status_reason_ hidden":"","street":""," submit_date":"2020-07-02T16: 36:04+02:00","submitter":"AR_ ESCALATOR","summary":" INC000147465| me-za-gp80-hoedspru-bry-1 | | E2379","time_zone":""," urgency":"1-Critical","vendor_ group":"","vendor_name":""," vendor_ticket_number":"","zip_ postal_code":""}
... View more