@@ -62,6 +62,23 @@ def test_unparsable_input_yields_empty_rather_than_raising(self):
         self.assertEqual(logarchive.parse_iterator_timestamp(''), '')
 
 
+class TestJsonExportTimestamp(unittest.TestCase):
+    """'log show --style json' writes the offset without a colon, which 3.10 cannot parse."""
+
+    def test_offset_without_colon_is_accepted(self):
+        parsed = logarchive.convert_to_utc('2026-03-14 10:00:00.100000-0500')
+        self.assertEqual(parsed, datetime.datetime(2026, 3, 14, 15, 0, 0, 100000,
+                                                   tzinfo=datetime.timezone.utc))
+
+    def test_positive_offset_and_other_fraction_widths(self):
+        self.assertEqual(logarchive.convert_to_utc('2026-03-14 10:00:00.1+0130').minute, 30)
+        self.assertEqual(logarchive.convert_to_utc('2026-03-14 10:00:00.123456789+0000').microsecond,
+                         123456)
+
+    def test_offset_with_colon_still_parses(self):
+        self.assertEqual(logarchive.convert_to_utc('2026-03-14 10:00:00.000000-05:00').hour, 15)
+
+
 class TestSearchPatternsMatchRealLayouts(unittest.TestCase):
     """The declared globs must match every extraction layout the data arrives in.
 
 
@@ -1784,17 +1784,22 @@
                 'Subsystem', 'Category', 'Event Message', 'Trace ID')
 
 
+_JSON_OFFSET = re.compile(r'([+-]\d{2})(\d{2})$')
+
+
 def convert_to_utc(timestamp):
-    # dt_local = datetime.strptime(timestamp, "%Y-%m-%d %H:%M:%S.%f%z")
-    # dt_utc = dt_local.astimezone(timezone.utc)
-    # return dt_utc.astimezone(timezone.utc)
-    # NOTE:
-    #   python 3.7-3.10 have datetime.fromisoformat() but it had a bug where it didn't
-    #   parse timezones correctly -- so this is now 3.11 onwards:
-    #   if you're on 3.10 and know your python-fun, uncomment the first 3 lines
-    #   but it'll run much slower than 3.11+ with this new version
-    
-    return datetime.fromisoformat(timestamp).astimezone(timezone.utc)
+    """Parse the 'log show --style json' timestamp, e.g. 2026-03-14 10:00:00.100000-0500.
+
+    The offset has no colon. datetime.fromisoformat() accepts that only from 3.11, and on
+    3.10 it also takes a fraction of exactly 3 or 6 digits, so normalize both here rather
+    than depend on the interpreter version.
+    """
+    normalized = _JSON_OFFSET.sub(r'\1:\2', timestamp)
+    if '.' in normalized:
+        whole, rest = normalized.split('.', 1)
+        digits = len(rest) - len(rest.lstrip('0123456789'))
+        normalized = f'{whole}.{rest[:digits][:6].ljust(6, "0")}{rest[digits:]}'
+    return datetime.fromisoformat(normalized).astimezone(timezone.utc)
 
 
 def truncate_after_last_bracket(file_path):