topic Re: Splunkforwarder : System time went forwards by XX... in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Splunkforwarder-System-time-went-forwards-by-XX/m-p/449116#M78034 <P>As others have mentioned, it means the host's OS time updated and moved forward by 31.74 seconds. The time may drifted and was corrected by the NTP server. It's nothing to be concerned with.</P> Wed, 08 May 2019 15:19:23 GMT jcrabb_splunk 2019-05-08T15:19:23Z Splunkforwarder : System time went forwards by XX... https://community.splunk.com/t5/Getting-Data-In/Splunkforwarder-System-time-went-forwards-by-XX/m-p/449113#M78031 <P>Hello guys,</P> <P>what does this mean : "System time went forwards by 31.74..." from splunkforwarder (Windows v7.1.4)?</P> <P>Thanks for your help.</P> Wed, 08 May 2019 14:24:36 GMT https://community.splunk.com/t5/Getting-Data-In/Splunkforwarder-System-time-went-forwards-by-XX/m-p/449113#M78031 splunkreal 2019-05-08T14:24:36Z Re: Splunkforwarder : System time went forwards by XX... https://community.splunk.com/t5/Getting-Data-In/Splunkforwarder-System-time-went-forwards-by-XX/m-p/449114#M78032 <P>I believe it means, that the time within the Client Operating System changed time (or adjusted with NTP)</P> Wed, 08 May 2019 14:34:53 GMT https://community.splunk.com/t5/Getting-Data-In/Splunkforwarder-System-time-went-forwards-by-XX/m-p/449114#M78032 koshyk 2019-05-08T14:34:53Z Re: Splunkforwarder : System time went forwards by XX... https://community.splunk.com/t5/Getting-Data-In/Splunkforwarder-System-time-went-forwards-by-XX/m-p/449115#M78033 <P>It sounds like splunk is adjusting its timestamp based on the time stamp of your data</P> Wed, 08 May 2019 14:43:27 GMT https://community.splunk.com/t5/Getting-Data-In/Splunkforwarder-System-time-went-forwards-by-XX/m-p/449115#M78033 ryhluc01 2019-05-08T14:43:27Z Re: Splunkforwarder : System time went forwards by XX... https://community.splunk.com/t5/Getting-Data-In/Splunkforwarder-System-time-went-forwards-by-XX/m-p/449116#M78034 <P>As others have mentioned, it means the host's OS time updated and moved forward by 31.74 seconds. The time may drifted and was corrected by the NTP server. It's nothing to be concerned with.</P> Wed, 08 May 2019 15:19:23 GMT https://community.splunk.com/t5/Getting-Data-In/Splunkforwarder-System-time-went-forwards-by-XX/m-p/449116#M78034 jcrabb_splunk 2019-05-08T15:19:23Z