We have a sevone network monitoring a JSON data time field formatted as EPOCH in Scientific Notation format. All the examples do not show how to take into account for Scientific Notation. Any assistance would be appreciated. time=1.539895001846788E9
We currently have this setup for DATETIME_CONFIG=CURRENT but then all the events are off and it looks like they are being batch loaded every 4 hours in the search time line.
raw data in filesystem log file. Using inputs.conf with props.conf on the UF on the syslog servers: