Thanks for sharing this, Mary!
Time stamps must look like
"14/11/30 10:00:19.000 +0100"
for everybody who has issues
and if you get something like
"java.io.IOException: The filename, directory name, or volume label syntax is incorrect"
you tried to be smarter than ArcSight and specified -D with a PATH (i.e. c:\arcsight\export.events).
This does not work, so use only -D name.events and you will find the file in <path to connector>\current\replayagent
Retrieving data ...