Splunk DB Connect: How do I use epoch time when extracting the data time information?

[alexwade13]

Hi, I'm trying to figure out what to put in the DateTime format spot when set the SQL query and setting a rising column. The test says "Specify the format to extract the date time information (eg: dd/MM/yyyy HH:mm:ss.SSS) or cast the column to timestamp manually in your query." How do I get it to use Epoch time instead? Also, there are 3 milliseconds after the epoch time. I know the time format in props would be %s%3N, but that is not applicable here. Thanks!

[bambarit]

?have you resolved epoch timestamp?

[bambarit]

have you resolved epoch timestamp?

[sshres5]

I got this working by using the following:
SELECT CAST(date '1970-01-01' + (1/24/60/60/1000) *epoch_column AS timestamp) AS date_time, epoch_column

[splunk_zen]

Any solution to this?
Shouldn't DB connect actually prefer an epoch rising column rather than a human converted format as it's constantly evaluating for a higher value?

[splunk_zen]

Seems it just needs to be a DATETIME type and this goes away

[EmEdwards]

I am using a new version of DB connect 3.1.1 and seems even though I have a datetime datatype from SQL it still wont accept the column and requests a format.
I can't seem to get it to work.