topic Re: Date_Time Stamp from when the file was created or modified in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Date-Time-Stamp-from-when-the-file-was-created-or-modified/m-p/413926#M73229 <P>Thank you that worked perfectly.</P> Thu, 29 Nov 2018 02:13:12 GMT Melstrathdee 2018-11-29T02:13:12Z Date_Time Stamp from when the file was created or modified https://community.splunk.com/t5/Getting-Data-In/Date-Time-Stamp-from-when-the-file-was-created-or-modified/m-p/413924#M73227 <P>Hi Guys,<BR /> I have a CSV file that is created periodically that I have been asked to bring into Splunk. </P> <P>The events in this file don't have a time stamp on them.</P> <P>Is it possible to get the datetime from the "date modified" file properties.</P> <P>At present it is resorting to the time the file is ingested.</P> <P>Thanks<BR /> Mel</P> Thu, 29 Nov 2018 00:39:58 GMT https://community.splunk.com/t5/Getting-Data-In/Date-Time-Stamp-from-when-the-file-was-created-or-modified/m-p/413924#M73227 Melstrathdee 2018-11-29T00:39:58Z Re: Date_Time Stamp from when the file was created or modified https://community.splunk.com/t5/Getting-Data-In/Date-Time-Stamp-from-when-the-file-was-created-or-modified/m-p/413925#M73228 <P>Set <CODE>DATETIME_CONFIG = NONE</CODE> in props.conf for this source or sourcetype. Then (assuming you use a monitor or batch input) it will take the file modified time.</P> Thu, 29 Nov 2018 01:39:42 GMT https://community.splunk.com/t5/Getting-Data-In/Date-Time-Stamp-from-when-the-file-was-created-or-modified/m-p/413925#M73228 FrankVl 2018-11-29T01:39:42Z Re: Date_Time Stamp from when the file was created or modified https://community.splunk.com/t5/Getting-Data-In/Date-Time-Stamp-from-when-the-file-was-created-or-modified/m-p/413926#M73229 <P>Thank you that worked perfectly.</P> Thu, 29 Nov 2018 02:13:12 GMT https://community.splunk.com/t5/Getting-Data-In/Date-Time-Stamp-from-when-the-file-was-created-or-modified/m-p/413926#M73229 Melstrathdee 2018-11-29T02:13:12Z