<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: CSV TImestamp Problem in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/CSV-TImestamp-Problem/m-p/82813#M17181</link>
    <description>&lt;UL&gt;
&lt;LI&gt;also in between dayofweek and CRSDeptTime there are 10-15 columns.&lt;/LI&gt;
&lt;/UL&gt;</description>
    <pubDate>Mon, 08 Oct 2012 22:15:37 GMT</pubDate>
    <dc:creator>mehal</dc:creator>
    <dc:date>2012-10-08T22:15:37Z</dc:date>
    <item>
      <title>CSV TImestamp Problem</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/CSV-TImestamp-Problem/m-p/82810#M17178</link>
      <description>&lt;P&gt;Hello Folks,&lt;/P&gt;

&lt;P&gt;I have a csv file which has timestamp divided among various fields.&lt;BR /&gt;
(Initial 4 columns are shown)&lt;BR /&gt;
year,quarter,month,day.....&lt;BR /&gt;
2000,2,3,15&lt;BR /&gt;
2009,4,10,23&lt;/P&gt;

&lt;P&gt;etc..&lt;/P&gt;

&lt;P&gt;now if i specify time format as %Y, %m, %d then it considers quarter as month and month as day.&lt;BR /&gt;
I want to by-pass quarter and get values of year, month and day.&lt;/P&gt;

&lt;P&gt;Can any one tell me how can I achieve this ??&lt;/P&gt;

&lt;P&gt;If you have some doubt with question then do let me know.&lt;/P&gt;

&lt;P&gt;Mehal&lt;/P&gt;</description>
      <pubDate>Mon, 08 Oct 2012 05:38:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/CSV-TImestamp-Problem/m-p/82810#M17178</guid>
      <dc:creator>mehal</dc:creator>
      <dc:date>2012-10-08T05:38:17Z</dc:date>
    </item>
    <item>
      <title>Re: CSV TImestamp Problem</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/CSV-TImestamp-Problem/m-p/82811#M17179</link>
      <description>&lt;P&gt;You'd have to specify a custom &lt;CODE&gt;datetime.xml&lt;/CODE&gt; for parsing this.&lt;/P&gt;

&lt;P&gt;Can you provide a complete sample?&lt;/P&gt;</description>
      <pubDate>Mon, 08 Oct 2012 14:06:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/CSV-TImestamp-Problem/m-p/82811#M17179</guid>
      <dc:creator>dart</dc:creator>
      <dc:date>2012-10-08T14:06:22Z</dc:date>
    </item>
    <item>
      <title>Re: CSV TImestamp Problem</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/CSV-TImestamp-Problem/m-p/82812#M17180</link>
      <description>&lt;P&gt;Hi Dart,&lt;/P&gt;

&lt;P&gt;The file has numerous number of data fields (columns).. &lt;BR /&gt;
They are as below : (shown relevant only )&lt;BR /&gt;
year,quarter,month,dayofmonth,dayofweek,.......,CRSDeptTime,.... &lt;BR /&gt;
where CRSDeptTIme has hours in from of hhmm.&lt;/P&gt;

&lt;P&gt;Now i want to extract fields year, month , dayofmonth and CRSDeptTIme to determine timestamp..&lt;BR /&gt;
Anyidea on how i can achieve this ???&lt;/P&gt;

&lt;P&gt;In case still you have doubt with format plz do let me know.&lt;/P&gt;</description>
      <pubDate>Mon, 08 Oct 2012 22:10:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/CSV-TImestamp-Problem/m-p/82812#M17180</guid>
      <dc:creator>mehal</dc:creator>
      <dc:date>2012-10-08T22:10:32Z</dc:date>
    </item>
    <item>
      <title>Re: CSV TImestamp Problem</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/CSV-TImestamp-Problem/m-p/82813#M17181</link>
      <description>&lt;UL&gt;
&lt;LI&gt;also in between dayofweek and CRSDeptTime there are 10-15 columns.&lt;/LI&gt;
&lt;/UL&gt;</description>
      <pubDate>Mon, 08 Oct 2012 22:15:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/CSV-TImestamp-Problem/m-p/82813#M17181</guid>
      <dc:creator>mehal</dc:creator>
      <dc:date>2012-10-08T22:15:37Z</dc:date>
    </item>
    <item>
      <title>Re: CSV TImestamp Problem</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/CSV-TImestamp-Problem/m-p/82814#M17182</link>
      <description>&lt;P&gt;Year is 4 digits long. example 1999&lt;BR /&gt;
quarter is 1 digit long. example 3&lt;BR /&gt;
month is max 2 digits long example 12 or 4&lt;BR /&gt;
dayofmonth is max 2 digits long example 5 or 23&lt;BR /&gt;
CRSdeptTime is 4 digits long example 0930 [09 hours 30 min]&lt;/P&gt;</description>
      <pubDate>Mon, 08 Oct 2012 22:22:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/CSV-TImestamp-Problem/m-p/82814#M17182</guid>
      <dc:creator>mehal</dc:creator>
      <dc:date>2012-10-08T22:22:18Z</dc:date>
    </item>
  </channel>
</rss>

