I have one field time received this is showing date and time i want to change with that time to _time in props .conf how it would work because i want change to _time or any other way please suggest

[abhishekdubey00]

FIELD -TimeReceived: 2019-05-09T05:29:03.000Z

this is my prpos .conf
xyz
SHOULD_LINEMERGE=false
NO_BINARY_CHECK=true
LINE_BREAKER = ([\r\n]+)
CHARSET=UTF-8
KV_MODE=json
TRUNCATE=999999
DATETIME_CONFIG =

[koshyk]

is your event Starting with TimeReceived? i.e.

TimeReceived: 2019-05-09T05:29:03.000Z some other data  xxxx yyyy zzz

If yes, Please try

[your_source_type]
SHOULD_LINEMERGE=false
NO_BINARY_CHECK=true
LINE_BREAKER = ([\r\n]+)
TIME_PREFIX = ^TimeReceived:\s
TIME_FORMAT = %Y-%m-%dT%H:%M:%S

Then restart splunkd