I have a epoch time in my events: timestamp=1478787869121. How to write props.conf to extract this timestamp?
Try this:
[your sourcetype] TIME_PREFIX = timestamp= TIME_FORMAT = %s%3N