All,
Is there a way to force the _time field in a CSV import to a single time, as opposed to individual stamps per record?
If you set DATETIME_CONFIG = NONE in props.conf it should default to the file's modification time, giving every event the same timestamp.
DATETIME_CONFIG = NONE