<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to convert the MongoDB ISO date to Normal date format in HUnk in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-MongoDB-ISO-date-to-Normal-date-format-in/m-p/112588#M23599</link>
    <description>&lt;P&gt;Hi rdagan_splunk,&lt;/P&gt;

&lt;P&gt;Thanks for giving me the reply&lt;/P&gt;

&lt;P&gt;i given all the settings in the MongoDB Virtual index but still i am facing the same  and also i have searched the prop.conf file contains Mongo DB Collection name but i didn't find the prop.conf file. Can u please share me the Path of that prop.conf (which contains the Mongo DB collection information)&lt;/P&gt;

&lt;P&gt;Thanks in Advance&lt;/P&gt;</description>
    <pubDate>Wed, 01 Apr 2015 12:29:53 GMT</pubDate>
    <dc:creator>rkanumula</dc:creator>
    <dc:date>2015-04-01T12:29:53Z</dc:date>
    <item>
      <title>How to convert the MongoDB ISO date to Normal date format in HUnk</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-MongoDB-ISO-date-to-Normal-date-format-in/m-p/112586#M23597</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;
Can you please share How to convert mongodb ISO date into Normal date format in Hunk . I am getting the date format as "1426185748" but i want the output format as "YYYY-MM-DD"&lt;/P&gt;

&lt;P&gt;Thanks in advance&lt;/P&gt;</description>
      <pubDate>Tue, 31 Mar 2015 08:59:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-MongoDB-ISO-date-to-Normal-date-format-in/m-p/112586#M23597</guid>
      <dc:creator>rkanumula</dc:creator>
      <dc:date>2015-03-31T08:59:40Z</dc:date>
    </item>
    <item>
      <title>Re: How to convert the MongoDB ISO date to Normal date format in HUnk</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-MongoDB-ISO-date-to-Normal-date-format-in/m-p/112587#M23598</link>
      <description>&lt;P&gt;In my case I added the format = date to the indexes.conf file under /hunk/etc/apps/search/local&lt;BR /&gt;
That flag will extract ISODate and you should be able to see a JSON format and _timestamp field in the Hunk UI&lt;BR /&gt;
For example,&lt;BR /&gt;
[mongodb_movie_rating]&lt;BR /&gt;
vix.mongodb.collection = movieratings&lt;BR /&gt;
vix.mongodb.db = raanan&lt;BR /&gt;
vix.mongodb.field.time = ts&lt;BR /&gt;
vix.mongodb.field.time.format = date&lt;BR /&gt;
vix.provider = local-mongodb&lt;/P&gt;

&lt;P&gt;After the extraction you can also add more flags in the props.conf.  For example, in my case I also have&lt;BR /&gt;
[movieratings]&lt;BR /&gt;
MAX_DAYS_AGO = 123456789&lt;BR /&gt;
TIME_FORMAT = %s&lt;BR /&gt;
TIME_PREFIX = _timestamp" :&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 19:21:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-MongoDB-ISO-date-to-Normal-date-format-in/m-p/112587#M23598</guid>
      <dc:creator>rdagan_splunk</dc:creator>
      <dc:date>2020-09-28T19:21:56Z</dc:date>
    </item>
    <item>
      <title>Re: How to convert the MongoDB ISO date to Normal date format in HUnk</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-MongoDB-ISO-date-to-Normal-date-format-in/m-p/112588#M23599</link>
      <description>&lt;P&gt;Hi rdagan_splunk,&lt;/P&gt;

&lt;P&gt;Thanks for giving me the reply&lt;/P&gt;

&lt;P&gt;i given all the settings in the MongoDB Virtual index but still i am facing the same  and also i have searched the prop.conf file contains Mongo DB Collection name but i didn't find the prop.conf file. Can u please share me the Path of that prop.conf (which contains the Mongo DB collection information)&lt;/P&gt;

&lt;P&gt;Thanks in Advance&lt;/P&gt;</description>
      <pubDate>Wed, 01 Apr 2015 12:29:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-MongoDB-ISO-date-to-Normal-date-format-in/m-p/112588#M23599</guid>
      <dc:creator>rkanumula</dc:creator>
      <dc:date>2015-04-01T12:29:53Z</dc:date>
    </item>
    <item>
      <title>Re: How to convert the MongoDB ISO date to Normal date format in HUnk</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-MongoDB-ISO-date-to-Normal-date-format-in/m-p/112589#M23600</link>
      <description>&lt;P&gt;Can you share your indexes.conf file that includes all the configurations?&lt;BR /&gt;
There is no props.conf out of the box. You will need to create it.&lt;BR /&gt;&lt;BR /&gt;
Look for an example props.conf In this thread &lt;BR /&gt;
&lt;A href="http://answers.splunk.com/answers/225427/how-to-get-hunk-to-parse-the-date-properly-in-my-s.html" target="_blank"&gt;http://answers.splunk.com/answers/225427/how-to-get-hunk-to-parse-the-date-properly-in-my-s.html&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;In my example,  ts is the field + date is the format:&lt;BR /&gt;
db.movieratings.find()&lt;BR /&gt;
{ "_id" : ObjectId("5388e41c12569b70c376e9fb"), "userid" : 1, "movieid" : 122, "ts" : ISODate("1996-08-02T11:24:06Z"), "rating" : 5 }&lt;BR /&gt;
{ "_id" : ObjectId("5388e41c12569b70c376e9fc"), "userid" : 1, "movieid" : 185, "ts" : ISODate("1996-08-02T10:58:45Z"), "rating" : 5 }&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 19:28:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-MongoDB-ISO-date-to-Normal-date-format-in/m-p/112589#M23600</guid>
      <dc:creator>rdagan_splunk</dc:creator>
      <dc:date>2020-09-28T19:28:46Z</dc:date>
    </item>
  </channel>
</rss>

