The field "perfmon_value" is a multivalue field, in this case there are it has 45 values. This value is captured every 20 seconds.
I created search that separates each value into a separate event by using the "mvexpand" command. The issue we have is that every event has the same _time value. This time should be incremented by 20secs for every value in the "perfmon_value" field. Is there a way to change the _time field for each event ?