I have two fileds TIME and Last execution TIME.
In input.conf i have mapped TIME field to use a index time(_time) but in some cases it take the last execution TIME.
how to overcome this?
Can you please provide the actual config you have and also some sample data? I don't understand what you mean with mapping time in inputs.conf.
I think he means using indextime as timestamp in inputs.conf 🙂
That would still be controlled through props.conf and not inputs.conf, right?
yes you are right. I dont think we can control timestamp of event using inputs.conf.
