https://community.splunk.com/t5/Getting-Data-In/Getting-None-value-in-timestamp-along-with-Datetime-value-in/m-p/531335#M89388 <P>In raw data, timestamp field value is 1606730113962778 but for the <STRONG>timestamp</STRONG> field in the interesting fields list i am getting two values which are <STRONG>none</STRONG> and&nbsp;<STRONG>606730113962778. B</STRONG>elow are the props configuration</P><P>Because of that _time is not properly getting configured.</P><P>[Sourcetype]</P><P>INDEXED_EXTACTION =json</P><P>NO_BINARY_CHECK = true</P><P>TIMESTAMP_FIELDS= timestamp</P><P>TIME_FOMAT=%s%6N</P><P>pulldown_type=1</P><P>&nbsp;</P> Mon, 30 Nov 2020 14:35:05 GMT Tamilraj28 2020-11-30T14:35:05Z https://community.splunk.com/t5/Getting-Data-In/Getting-None-value-in-timestamp-along-with-Datetime-value-in/m-p/531335#M89388 <P>In raw data, timestamp field value is 1606730113962778 but for the <STRONG>timestamp</STRONG> field in the interesting fields list i am getting two values which are <STRONG>none</STRONG> and&nbsp;<STRONG>606730113962778. B</STRONG>elow are the props configuration</P><P>Because of that _time is not properly getting configured.</P><P>[Sourcetype]</P><P>INDEXED_EXTACTION =json</P><P>NO_BINARY_CHECK = true</P><P>TIMESTAMP_FIELDS= timestamp</P><P>TIME_FOMAT=%s%6N</P><P>pulldown_type=1</P><P>&nbsp;</P> Mon, 30 Nov 2020 14:35:05 GMT https://community.splunk.com/t5/Getting-Data-In/Getting-None-value-in-timestamp-along-with-Datetime-value-in/m-p/531335#M89388 Tamilraj28 2020-11-30T14:35:05Z