This suggestion is what worked for my use case also. Thanks for providing an alternative solution - I tried the datetime.xml file stuff and got nowhere when trying to set the date from the file name. For anyone else, you can test the eval with SPL like so for my case: | makeresults | eval source="/my_file_path/downloaded_files/2022-08-22_daily_log.csv" | eval _time=strptime(replace(source,".*(?=/)/",""),"%Y-%m-%d_daily_log.csv")   ... View more