https://community.splunk.com/t5/Getting-Data-In/no-appending-timestamp-and-syslog-ng-clarification/m-p/447611#M77834 <P>You do not need to set <CODE>no_appending_timestamp=true</CODE>.</P> Thu, 15 Aug 2019 13:33:07 GMT richgalloway 2019-08-15T13:33:07Z https://community.splunk.com/t5/Getting-Data-In/no-appending-timestamp-and-syslog-ng-clarification/m-p/447610#M77833 <P>Just need to clarify - if I'm using syslog-ng to receive udp syslog I do not need the no_appending_timestamp = true in inputs.conf, correct? The no_appending_timestamp = true is used when receiving udp and not using a log collector like syslog-ng.</P> Wed, 30 Sep 2020 01:44:21 GMT https://community.splunk.com/t5/Getting-Data-In/no-appending-timestamp-and-syslog-ng-clarification/m-p/447610#M77833 mikefg 2020-09-30T01:44:21Z https://community.splunk.com/t5/Getting-Data-In/no-appending-timestamp-and-syslog-ng-clarification/m-p/447611#M77834 <P>You do not need to set <CODE>no_appending_timestamp=true</CODE>.</P> Thu, 15 Aug 2019 13:33:07 GMT https://community.splunk.com/t5/Getting-Data-In/no-appending-timestamp-and-syslog-ng-clarification/m-p/447611#M77834 richgalloway 2019-08-15T13:33:07Z