Is there a way to use a date in a CSV file name as the timestamp without editing datetime.xml or props.conf?

[srichansen]

Hi All,

I am trying to import a CSV file that has a date in the filename and I am wondering if it's possible to use that date as the timestamp without having to edit the datetime.xml and the props.conf files?

my file format is the following:
meetboek_2017-02-01.csv
meetboek_2017-02-02.csv

Ideally I would like all the events in the file to have a timestamp with 2017/02/01... etc.
All the various settings I have tried under advances in sourcetype have not worked and I can only get it to show the modtime.

Any tips or help in this would be appreciated.
Thanks in advance!
Simon

[cpetterborg · Accepted solution]

This comes up fairly often, and the answer the last time I looked was, no, you cannot use the timestamp in the filename for the timestamp of the events.:

https://answers.splunk.com/answers/320978/how-to-extract-the-timestamp-from-a-filename-at-in.html

[srichansen]

Yes, I had see the answers, but was hoping that it had since been solved.
Thanks for the assistance!