Even if you have multiple events coming for a particular time. Splunk breaks them by the indexed time(this means by the order splunk indexed the incoming events).
For this you need to write your props.conf like below.
DATETIME_CONFIG = CURRENT ----------("CURRENT" will set the time of the event to the time that the event was
merged from lines, or worded differently, the time it passed through the