<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to fix Incorrect timestamp in DB Connect ? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-fix-Incorrect-timestamp-in-DB-Connect/m-p/237557#M14762</link>
    <description>&lt;P&gt;Hi,  I am  trying to figure out how to convert the timestamp in DB Connect back to a MM/DD/YYYY value.  I was able to do this with the fieldformat command.  However when I added the chart command, it changed back into numerical values (1442358000.000,  1442444400.000, etc..)  How do I correct this problem? &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| dbquery "PB CSL" limit=1000 "select a.SOURCE_SYSTEM_NAME, trunc(creation_time), count(*) Count from PB_CSL.activity a, PB_CSL.Activitymap b where creation_time &amp;lt; trunc(sysdate) - 0 and creation_time  &amp;gt;= trunc(sysdate) -5 and a.service_id = b.activity_id group by SOURCE_SYSTEM_NAME, trunc(creation_time) order by SOURCE_SYSTEM_NAME, trunc(creation_time)" | rename TRUNC(CREATION_TIME) as Date| fieldformat "Date"=strftime('Date', "%m-%d-%Y") | chart values(COUNT) over SOURCE_SYSTEM_NAME by Date
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Tue, 22 Sep 2015 21:58:13 GMT</pubDate>
    <dc:creator>pmcfadden91</dc:creator>
    <dc:date>2015-09-22T21:58:13Z</dc:date>
    <item>
      <title>How to fix Incorrect timestamp in DB Connect ?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-fix-Incorrect-timestamp-in-DB-Connect/m-p/237557#M14762</link>
      <description>&lt;P&gt;Hi,  I am  trying to figure out how to convert the timestamp in DB Connect back to a MM/DD/YYYY value.  I was able to do this with the fieldformat command.  However when I added the chart command, it changed back into numerical values (1442358000.000,  1442444400.000, etc..)  How do I correct this problem? &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| dbquery "PB CSL" limit=1000 "select a.SOURCE_SYSTEM_NAME, trunc(creation_time), count(*) Count from PB_CSL.activity a, PB_CSL.Activitymap b where creation_time &amp;lt; trunc(sysdate) - 0 and creation_time  &amp;gt;= trunc(sysdate) -5 and a.service_id = b.activity_id group by SOURCE_SYSTEM_NAME, trunc(creation_time) order by SOURCE_SYSTEM_NAME, trunc(creation_time)" | rename TRUNC(CREATION_TIME) as Date| fieldformat "Date"=strftime('Date', "%m-%d-%Y") | chart values(COUNT) over SOURCE_SYSTEM_NAME by Date
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 22 Sep 2015 21:58:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-fix-Incorrect-timestamp-in-DB-Connect/m-p/237557#M14762</guid>
      <dc:creator>pmcfadden91</dc:creator>
      <dc:date>2015-09-22T21:58:13Z</dc:date>
    </item>
    <item>
      <title>Re: How to fix Incorrect timestamp in DB Connect ?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-fix-Incorrect-timestamp-in-DB-Connect/m-p/237558#M14763</link>
      <description>&lt;P&gt;HI pmcfadden91,&lt;/P&gt;

&lt;P&gt;The fieldformat command does not change the underlying value of Date field.  As per the docs...&lt;/P&gt;

&lt;P&gt;&lt;EM&gt;With the fieldformat command you can use eval expressions to change the format of a field value when the results render. You can change the format without changing the underlying value of the field. Commands later in the search pipeline cannot modify the formatted value.&lt;/EM&gt;&lt;/P&gt;

&lt;P&gt;Trying using an eval instead on fieldformat , e.g. |eval Date = strftime('Date', "%m-%d-%Y")&lt;/P&gt;

&lt;P&gt;Hope this helps.&lt;/P&gt;</description>
      <pubDate>Wed, 23 Sep 2015 00:31:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-fix-Incorrect-timestamp-in-DB-Connect/m-p/237558#M14763</guid>
      <dc:creator>gcato</dc:creator>
      <dc:date>2015-09-23T00:31:05Z</dc:date>
    </item>
  </channel>
</rss>

