<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Time Stamp in Db in Security</title>
    <link>https://community.splunk.com/t5/Security/Time-Stamp-in-Db/m-p/121572#M3728</link>
    <description>&lt;P&gt;See &lt;A href="http://docs.splunk.com/Documentation/Splunk/6.0.1/admin/Propsconf"&gt;http://docs.splunk.com/Documentation/Splunk/6.0.1/admin/Propsconf&lt;/A&gt;, search for &lt;CODE&gt;DATETIME_CONFIG&lt;/CODE&gt;.&lt;/P&gt;

&lt;P&gt;Set &lt;CODE&gt;DATETIME_CONFIG = NONE&lt;/CODE&gt; in your &lt;CODE&gt;inputs.conf&lt;/CODE&gt; file, or in the Advanced Mode tab when you create the input in Splunk Web.&lt;/P&gt;</description>
    <pubDate>Wed, 22 Jan 2014 13:32:50 GMT</pubDate>
    <dc:creator>laserval</dc:creator>
    <dc:date>2014-01-22T13:32:50Z</dc:date>
    <item>
      <title>Time Stamp in Db</title>
      <link>https://community.splunk.com/t5/Security/Time-Stamp-in-Db/m-p/121570#M3726</link>
      <description>&lt;P&gt;I am reading values from DB and _time column get filled in unexpected way.&lt;BR /&gt;
Is there any way to fill the _time time with current date and time while reading the data from DB.&lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Wed, 22 Jan 2014 13:21:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Time-Stamp-in-Db/m-p/121570#M3726</guid>
      <dc:creator>jimjohn</dc:creator>
      <dc:date>2014-01-22T13:21:44Z</dc:date>
    </item>
    <item>
      <title>Re: Time Stamp in Db</title>
      <link>https://community.splunk.com/t5/Security/Time-Stamp-in-Db/m-p/121571#M3727</link>
      <description>&lt;P&gt;How is _time being set currently?  How are you reading the DB?&lt;/P&gt;</description>
      <pubDate>Wed, 22 Jan 2014 13:32:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Time-Stamp-in-Db/m-p/121571#M3727</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2014-01-22T13:32:24Z</dc:date>
    </item>
    <item>
      <title>Re: Time Stamp in Db</title>
      <link>https://community.splunk.com/t5/Security/Time-Stamp-in-Db/m-p/121572#M3728</link>
      <description>&lt;P&gt;See &lt;A href="http://docs.splunk.com/Documentation/Splunk/6.0.1/admin/Propsconf"&gt;http://docs.splunk.com/Documentation/Splunk/6.0.1/admin/Propsconf&lt;/A&gt;, search for &lt;CODE&gt;DATETIME_CONFIG&lt;/CODE&gt;.&lt;/P&gt;

&lt;P&gt;Set &lt;CODE&gt;DATETIME_CONFIG = NONE&lt;/CODE&gt; in your &lt;CODE&gt;inputs.conf&lt;/CODE&gt; file, or in the Advanced Mode tab when you create the input in Splunk Web.&lt;/P&gt;</description>
      <pubDate>Wed, 22 Jan 2014 13:32:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Time-Stamp-in-Db/m-p/121572#M3728</guid>
      <dc:creator>laserval</dc:creator>
      <dc:date>2014-01-22T13:32:50Z</dc:date>
    </item>
    <item>
      <title>Re: Time Stamp in Db</title>
      <link>https://community.splunk.com/t5/Security/Time-Stamp-in-Db/m-p/121573#M3729</link>
      <description>&lt;P&gt;I use splunk DB connect option.The difficulty i am facing is my table also doesnt have a date or time column where i can map to splunk to Timestamp column  using splunk web&lt;/P&gt;</description>
      <pubDate>Wed, 22 Jan 2014 14:12:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Time-Stamp-in-Db/m-p/121573#M3729</guid>
      <dc:creator>jimjohn</dc:creator>
      <dc:date>2014-01-22T14:12:58Z</dc:date>
    </item>
  </channel>
</rss>

