Hi,   i have an edge server with splunk forward to ship log file to indexer. The log is being indexed but splunk is changing days for months. The events start with the example  17:00:16,965;06-12-2022 17:00:16.740;10.129.150.83; This event is from 6 of december but is indexed as 12 of June. The time field is ok but _time not. I add props.conf at app/local on edge server with the following configs but did not resolve [mbe-cdr] TIME_PREFIX = \d+:\d+:\d+\,\d+\; TIME_FORMAT = %d-%m-%Y %H:%M:%S.%Q   Thanks in advance   ... View more