https://community.splunk.com/t5/Getting-Data-In/issue-for-time/m-p/698038#M115749 <P>Please share your configuration as it is probably something amiss there. Also, please share your raw event (anonymised of course), preferably in a code block so we can see all the spacing, so we can figure out what needs changing in the configuration.</P> Tue, 03 Sep 2024 08:46:33 GMT ITWhisperer 2024-09-03T08:46:33Z https://community.splunk.com/t5/Getting-Data-In/issue-for-time/m-p/698034#M115748 <P>I have events from Trellix Hx appliance and i need to adjust _time of the log events</P><P>&nbsp;</P><P>because it coming as 9/3/20 and we are on 9/3/2024&nbsp;</P><P>how can this be changeable.</P><P>&nbsp;</P><P>thanks</P> Tue, 03 Sep 2024 07:50:18 GMT https://community.splunk.com/t5/Getting-Data-In/issue-for-time/m-p/698034#M115748 KhalidAlharthi 2024-09-03T07:50:18Z https://community.splunk.com/t5/Getting-Data-In/issue-for-time/m-p/698038#M115749 <P>Please share your configuration as it is probably something amiss there. Also, please share your raw event (anonymised of course), preferably in a code block so we can see all the spacing, so we can figure out what needs changing in the configuration.</P> Tue, 03 Sep 2024 08:46:33 GMT https://community.splunk.com/t5/Getting-Data-In/issue-for-time/m-p/698038#M115749 ITWhisperer 2024-09-03T08:46:33Z https://community.splunk.com/t5/Getting-Data-In/issue-for-time/m-p/698050#M115750 <P>HX can export events in multiple formats as far as I remember (bonus question - are you talking about operational logs or security events?) so you can also look on the HX's side to check its configuration.</P> Tue, 03 Sep 2024 10:14:37 GMT https://community.splunk.com/t5/Getting-Data-In/issue-for-time/m-p/698050#M115750 PickleRick 2024-09-03T10:14:37Z