topic Regarding Timestamps in CSV vs PDF in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Regarding-Timestamps-in-CSV-vs-PDF/m-p/115676#M24186 <P>I have some users who schedule a report to come as a CSV attachment. Within that the timestamp will display differently from a PDF export of the same data. Here is an example of the first 4 timestamps of the report as a CSV vs a PDF.</P> <P>CSV (_time):<BR /> 1402492281<BR /> 1402464600<BR /> 1402474609<BR /> 1402474608</P> <P>PDF (_time):<BR /> 2014-06-11T08:11:21.000-05:00<BR /> 2014-06-11T03:16:49.000-05:00<BR /> 2014-06-11T03:16:48.000-05:00<BR /> 2014-06-11T00:30:00.000-05:00</P> <P>I get that the timestamp in the CSV is in unix epoch. Is there a document that confirms that an export to PDF automatically converts epoch to a more human readable format?</P> Mon, 23 Jun 2014 15:53:12 GMT LiquidTension 2014-06-23T15:53:12Z Regarding Timestamps in CSV vs PDF https://community.splunk.com/t5/Getting-Data-In/Regarding-Timestamps-in-CSV-vs-PDF/m-p/115676#M24186 <P>I have some users who schedule a report to come as a CSV attachment. Within that the timestamp will display differently from a PDF export of the same data. Here is an example of the first 4 timestamps of the report as a CSV vs a PDF.</P> <P>CSV (_time):<BR /> 1402492281<BR /> 1402464600<BR /> 1402474609<BR /> 1402474608</P> <P>PDF (_time):<BR /> 2014-06-11T08:11:21.000-05:00<BR /> 2014-06-11T03:16:49.000-05:00<BR /> 2014-06-11T03:16:48.000-05:00<BR /> 2014-06-11T00:30:00.000-05:00</P> <P>I get that the timestamp in the CSV is in unix epoch. Is there a document that confirms that an export to PDF automatically converts epoch to a more human readable format?</P> Mon, 23 Jun 2014 15:53:12 GMT https://community.splunk.com/t5/Getting-Data-In/Regarding-Timestamps-in-CSV-vs-PDF/m-p/115676#M24186 LiquidTension 2014-06-23T15:53:12Z Re: Regarding Timestamps in CSV vs PDF https://community.splunk.com/t5/Getting-Data-In/Regarding-Timestamps-in-CSV-vs-PDF/m-p/115677#M24187 <P>Adding "convert ctime(_time) as timestamp" to the query allowed the csv export to display a friendlier timestamp.</P> Tue, 08 Jul 2014 16:10:56 GMT https://community.splunk.com/t5/Getting-Data-In/Regarding-Timestamps-in-CSV-vs-PDF/m-p/115677#M24187 LiquidTension 2014-07-08T16:10:56Z