https://community.splunk.com/t5/Splunk-Enterprise/File-Create-Time/m-p/528098#M4084 <P>Before searching I just created 3 files. But it still didn't show up.</P><P>I also search in&nbsp;<SPAN>Verbose mode but still didn't see it.</SPAN><BR />Do you know any app related to&nbsp;File Create Time that I can download?</P> Thu, 05 Nov 2020 11:41:05 GMT thaoquyen 2020-11-05T11:41:05Z https://community.splunk.com/t5/Splunk-Enterprise/File-Create-Time/m-p/527993#M4080 <P>I want to see Event Description with File Create Time. But in mine, it didn't have it. Why? And hơ can I see it?<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="This is mine" style="width: 826px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/11646i48BB23529BEDE1E7/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="This is mine" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">This is mine</span></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="This is what I want to see" style="width: 939px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/11647iB1DD231E714F14F9/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="This is what I want to see" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">This is what I want to see</span></span></P> Wed, 04 Nov 2020 18:25:37 GMT https://community.splunk.com/t5/Splunk-Enterprise/File-Create-Time/m-p/527993#M4080 thaoquyen 2020-11-04T18:25:37Z https://community.splunk.com/t5/Splunk-Enterprise/File-Create-Time/m-p/527997#M4081 <P>Do the events contain a 'File Create Time' field?&nbsp; If not, nothing can be done.&nbsp; If the field is present then make sure you are searching in Verbose mode so more fields are extract automatically.&nbsp; If it's still not there then you'll need to extract it using any of several methods.&nbsp; The easiest way to do that is to install an app that does the extraction for you.</P> Wed, 04 Nov 2020 18:32:28 GMT https://community.splunk.com/t5/Splunk-Enterprise/File-Create-Time/m-p/527997#M4081 richgalloway 2020-11-04T18:32:28Z https://community.splunk.com/t5/Splunk-Enterprise/File-Create-Time/m-p/528098#M4084 <P>Before searching I just created 3 files. But it still didn't show up.</P><P>I also search in&nbsp;<SPAN>Verbose mode but still didn't see it.</SPAN><BR />Do you know any app related to&nbsp;File Create Time that I can download?</P> Thu, 05 Nov 2020 11:41:05 GMT https://community.splunk.com/t5/Splunk-Enterprise/File-Create-Time/m-p/528098#M4084 thaoquyen 2020-11-05T11:41:05Z