topic How to add a custom year for a certain file in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-add-a-custom-year-for-a-certain-file/m-p/435882#M76060 <P>I am using Spunk Enterprise to upload log files and generate a timeline. I am uploading a linux secure.log file. It has a date and time stamp, but is missing the year. Splunk is automatically assigning the year 2018. I want to manually set the year to 2017 for just this one log file - not other files. Is there a way to automatically assign the year 2017, but keep the rest of date on the "Set Sourcetype" screen? Apparently you can edit props.conf, but I don't know if that will affect other files too. </P> Tue, 16 Oct 2018 20:27:03 GMT mikemichaleson 2018-10-16T20:27:03Z How to add a custom year for a certain file https://community.splunk.com/t5/Getting-Data-In/How-to-add-a-custom-year-for-a-certain-file/m-p/435882#M76060 <P>I am using Spunk Enterprise to upload log files and generate a timeline. I am uploading a linux secure.log file. It has a date and time stamp, but is missing the year. Splunk is automatically assigning the year 2018. I want to manually set the year to 2017 for just this one log file - not other files. Is there a way to automatically assign the year 2017, but keep the rest of date on the "Set Sourcetype" screen? Apparently you can edit props.conf, but I don't know if that will affect other files too. </P> Tue, 16 Oct 2018 20:27:03 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-add-a-custom-year-for-a-certain-file/m-p/435882#M76060 mikemichaleson 2018-10-16T20:27:03Z