topic How to use source file modification time instead of guessed date in events? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-use-source-file-modification-time-instead-of-guessed-date/m-p/568753#M100920 <P>Hello guys,</P><P>how to use the source file modification date instead of "guessed" or extracted timestamp from csv file?</P><P>I'm using specific sourcetype and extracting fields at search time (fields transformations)</P><P>Thanks.</P><P>Splunk 7.3.4</P><P>&nbsp;</P> Tue, 28 Sep 2021 14:37:23 GMT splunkreal 2021-09-28T14:37:23Z How to use source file modification time instead of guessed date in events? https://community.splunk.com/t5/Getting-Data-In/How-to-use-source-file-modification-time-instead-of-guessed-date/m-p/568753#M100920 <P>Hello guys,</P><P>how to use the source file modification date instead of "guessed" or extracted timestamp from csv file?</P><P>I'm using specific sourcetype and extracting fields at search time (fields transformations)</P><P>Thanks.</P><P>Splunk 7.3.4</P><P>&nbsp;</P> Tue, 28 Sep 2021 14:37:23 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-use-source-file-modification-time-instead-of-guessed-date/m-p/568753#M100920 splunkreal 2021-09-28T14:37:23Z