I am facing date time issue while indexing csv data .
I do have a date field in my CSV file but i want to consider system time for an indexed data. I have added below parameters into props.conf of windows UF and on single instance linux splunk server $splunk home$/etc/system/local props.conf but still it is taking date/ time from the csv file.
DATETIMECONFIG = NONE
MAXTIMESTAMP_LOOKAHEAD = 0
@darshini2790 if you are planning to use current time, should you not be using?
DATETIME_CONFIG = CURRENT
KV_MODE = noneon your Search Head? The question is, if you want indexed extractions or not.