I'm building a Splunk App and would like to create some timecharts and other visualizations.
However, I would like to use the timestamp present in the data I'm sending to the app instead of the system time.
My data has timestamps as given below: 1/1/2000 12:00:00 AM
1/1/2016 12:00:00 AM
4/29/2019 5:32:00 PM
3/16/2018 9:41:00 PM
I want to modify the default Splunk timestamp to the entries from my data.