https://community.splunk.com/t5/Getting-Data-In/Ignore-time-stamp-from-the-event/m-p/182527#M36590 <P>Hello,<BR /> Could you use </P> <PRE><CODE>DATETIME_CONFIG =CURRENT </CODE></PRE> <P>Make sure they are placed in the receiving indexers if no heavy forwarder is used.</P> <P>Thanks</P> Tue, 11 Mar 2014 20:54:40 GMT linu1988 2014-03-11T20:54:40Z https://community.splunk.com/t5/Getting-Data-In/Ignore-time-stamp-from-the-event/m-p/182526#M36589 <P>Adding below attribute in props.conf to ignore the time stamp from the event isn't working.</P> <PRE>DATETIME_CONFIG = NONE</PRE> <P>MAX_TIMESTAMP_LOOKAHEAD didn't work either</P> <PRE>MAX_TIMESTAMP_LOOKAHEAD = 0 </PRE> <P>Any other way to specify Splunk not to look for time stamp from the event?</P> Tue, 11 Mar 2014 20:39:58 GMT https://community.splunk.com/t5/Getting-Data-In/Ignore-time-stamp-from-the-event/m-p/182526#M36589 pradeepkumarg 2014-03-11T20:39:58Z https://community.splunk.com/t5/Getting-Data-In/Ignore-time-stamp-from-the-event/m-p/182527#M36590 <P>Hello,<BR /> Could you use </P> <PRE><CODE>DATETIME_CONFIG =CURRENT </CODE></PRE> <P>Make sure they are placed in the receiving indexers if no heavy forwarder is used.</P> <P>Thanks</P> Tue, 11 Mar 2014 20:54:40 GMT https://community.splunk.com/t5/Getting-Data-In/Ignore-time-stamp-from-the-event/m-p/182527#M36590 linu1988 2014-03-11T20:54:40Z