@theopolis, sure of course. we're seeing the epoch is either missing or "0" for a lot of the records. and we're using firehose as the logging plugin. not sure if any of that may be relevant.