<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: I have a data that I'm manually ingesting the data from Splunk WEB but I don't have time stamp in my log but I have field that has time but no time in it . so I need that has my time stamp with default 00:00:00:000 has time for me ,how ? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/I-have-a-data-that-I-m-manually-ingesting-the-data-from-Splunk/m-p/394405#M94264</link>
    <description>&lt;P&gt;hello there,&lt;BR /&gt;
can you please elaborate on your challenge?&lt;BR /&gt;
what exactly are you trying to do?&lt;/P&gt;</description>
    <pubDate>Wed, 08 Aug 2018 03:21:50 GMT</pubDate>
    <dc:creator>adonio</dc:creator>
    <dc:date>2018-08-08T03:21:50Z</dc:date>
    <item>
      <title>I have a data that I'm manually ingesting the data from Splunk WEB but I don't have time stamp in my log but I have field that has time but no time in it . so I need that has my time stamp with default 00:00:00:000 has time for me ,how ?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/I-have-a-data-that-I-m-manually-ingesting-the-data-from-Splunk/m-p/394404#M94263</link>
      <description>&lt;P&gt;I have a data that I'm manually ingesting the data from Splunk WEB but I don't have time stamp in my log but I have field that has time but no time in it . so I need that has my time stamp with default 00:00:00:000 has time for me ,how ?&lt;/P&gt;</description>
      <pubDate>Tue, 07 Aug 2018 17:55:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/I-have-a-data-that-I-m-manually-ingesting-the-data-from-Splunk/m-p/394404#M94263</guid>
      <dc:creator>aorkcreate</dc:creator>
      <dc:date>2018-08-07T17:55:43Z</dc:date>
    </item>
    <item>
      <title>Re: I have a data that I'm manually ingesting the data from Splunk WEB but I don't have time stamp in my log but I have field that has time but no time in it . so I need that has my time stamp with default 00:00:00:000 has time for me ,how ?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/I-have-a-data-that-I-m-manually-ingesting-the-data-from-Splunk/m-p/394405#M94264</link>
      <description>&lt;P&gt;hello there,&lt;BR /&gt;
can you please elaborate on your challenge?&lt;BR /&gt;
what exactly are you trying to do?&lt;/P&gt;</description>
      <pubDate>Wed, 08 Aug 2018 03:21:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/I-have-a-data-that-I-m-manually-ingesting-the-data-from-Splunk/m-p/394405#M94264</guid>
      <dc:creator>adonio</dc:creator>
      <dc:date>2018-08-08T03:21:50Z</dc:date>
    </item>
    <item>
      <title>Re: I have a data that I'm manually ingesting the data from Splunk WEB but I don't have time stamp in my log but I have field that has time but no time in it . so I need that has my time stamp with default 00:00:00:000 has time for me ,how ?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/I-have-a-data-that-I-m-manually-ingesting-the-data-from-Splunk/m-p/394406#M94265</link>
      <description>&lt;P&gt;You need to look into timestamp assignments. If there is no timestamp at all then you might as well take index time as timestamp. In which case _time field will be populated with index time values. Check more in the URL below.&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/7.1.2/Data/HowSplunkextractstimestamps"&gt;http://docs.splunk.com/Documentation/Splunk/7.1.2/Data/HowSplunkextractstimestamps&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 08 Aug 2018 07:29:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/I-have-a-data-that-I-m-manually-ingesting-the-data-from-Splunk/m-p/394406#M94265</guid>
      <dc:creator>varad_joshi</dc:creator>
      <dc:date>2018-08-08T07:29:39Z</dc:date>
    </item>
  </channel>
</rss>

