I checked my script and the main part of it boils down to this: [...] foreach ($inputline in [...]) {    $output=@{}    #Manipulate external data, extract some fields, set $output.fields [...]    Write-Output $output } From what I found in the trimmed out block: # First we need a timestamp # Edit: No, we don't. We get the timestamp from the forwarder when the script is run # $output.time =( Get-Date -Format "dd-mm-yyyy HH:mm:ss K" ) As you can see - I tried to set time manually but resigned in the end and rely on the forwarder supplying proper timestamp at ingest time. For me it works. ... View more