topic Re: How to resolve alerts with the wrong time stamp? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-alerts-with-the-wrong-time-stamp/m-p/322956#M60130 <P>Do your events have the wrong timestamp? Have you configured your <CODE>props.conf</CODE> for correct timestamping? </P> Sat, 07 Apr 2018 17:01:38 GMT skoelpin 2018-04-07T17:01:38Z How to resolve alerts with the wrong time stamp? https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-alerts-with-the-wrong-time-stamp/m-p/322954#M60128 <P>Alerts with the wrong time stamp.<BR /> Any suggestions?<BR /> Please help. <BR /> Thanks in advance</P> Fri, 06 Apr 2018 18:34:18 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-alerts-with-the-wrong-time-stamp/m-p/322954#M60128 manideep6669 2018-04-06T18:34:18Z Re: How to resolve alerts with the wrong time stamp? https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-alerts-with-the-wrong-time-stamp/m-p/322955#M60129 <P>What do you mean by "wrong timestamp"? What is wrong with it?</P> Fri, 06 Apr 2018 18:48:11 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-alerts-with-the-wrong-time-stamp/m-p/322955#M60129 richgalloway 2018-04-06T18:48:11Z Re: How to resolve alerts with the wrong time stamp? https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-alerts-with-the-wrong-time-stamp/m-p/322956#M60130 <P>Do your events have the wrong timestamp? Have you configured your <CODE>props.conf</CODE> for correct timestamping? </P> Sat, 07 Apr 2018 17:01:38 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-alerts-with-the-wrong-time-stamp/m-p/322956#M60130 skoelpin 2018-04-07T17:01:38Z Re: How to resolve alerts with the wrong time stamp? https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-alerts-with-the-wrong-time-stamp/m-p/322957#M60131 <P><A href="http://docs.splunk.com/Documentation/Splunk/7.0.3/Data/Configuretimestamprecognition">http://docs.splunk.com/Documentation/Splunk/7.0.3/Data/Configuretimestamprecognition</A><BR /> You can correct your timestamp or you can modify it using props.conf in etc/system/local.</P> <P>Click in above link and check wheather you need to modify timestamp or as per your specific needs.</P> Sun, 08 Apr 2018 04:00:10 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-alerts-with-the-wrong-time-stamp/m-p/322957#M60131 Prakash493 2018-04-08T04:00:10Z