topic Re: Time format in Splunk Search

Time format

hxa27 — Mon, 14 Apr 2014 22:04:14 GMT

Hi,

I am using DB connect to fetch a table from the database which the table was imported as an Excel to the database. But, the problem is the time is showing like 1396760400.000 and tried different commands like convert, replace and other ones but the date is not changing. Also, when I tried just to rename the header of the field, I could not either. So, I have no idea what the problem is.
Idea/ suggestion would be great

Thanks

Re: Time format

linu1988 — Tue, 15 Apr 2014 05:32:10 GMT

try of convert ctime(datetime_column) is working?

Re: Time format

harshavrath — Mon, 28 Sep 2020 16:23:21 GMT

the date format that you are getting is an EPOCH time you can convert it by

to__char(date_field, 'DD-MON-YYYY HH24:MI:SS')

ex:SELECT to__char(date_filed, 'dd-mm-yyyy hh24:mi:ss AM') FROM table_name

Re: Time format

harshavrath — Mon, 28 Sep 2020 16:23:23 GMT

try this even this works

fieldformat new_date=strftime(dat_field,"%d-%m-%Y %H: %M: %S")

Re: Time format

hxa27 — Tue, 15 Apr 2014 14:58:50 GMT

Non of these worked not because they are wrong but I am not able to change anything in the particular column. Idea in how to fix this issue

Re: Time format

linu1988 — Tue, 15 Apr 2014 15:22:44 GMT

you wont be able to get in normal sql query. you need to do it splunk query. What is the database you are using?