Getting Data In

Can I use epoch as timestamp in DBConnect?

Path Finder


struggling with this for a while.

I have an epoch time value (10 digit NUMBER) that I want to use as both rising column and timestamp for the event.

The first works fine , but getting it to use this for the event timestamp not.

I know about the workaround of timestamp'1970-01-01 00:00:00' + ( "<my_field>" /86400 ) as eventTime,

but preferably I do not ingest an extra field if it is not really necessary.


there is no config I can get to work for the timestamp.

from the Java DateTimeFormatter it appears not possible, but just want to ask out here if anyone has ffound something




I have also tried using props.conf,

[mysourcetype ]

but it doesnt even reach this part and errors out earlier

error pattern:

2023-06-20 10:27:07.521 +0200 Trace-Id=940a0c4d-8c64-44d7-a948-39fd6e9b7417 [Scheduled-Job-Executor-5] ERROR org.easybatch.core.job.BatchJob - Unable to process Record: {header=[number=1, source="SHE170U-JOURNEY_TRACKER", creationDate="Tue Jun 20 10:27:07 CEST 2023"], payload=[HikariProxyResultSet@2091779680 wrapping oracle.jdbc.driver.ForwardOnlyResultSet@4f527ef2]} java.time.format.DateTimeParseException: Text '1687249036' could not be parsed at index 0 at java.base/java.time.format.DateTimeFormatter.parseResolved0( at java.base/java.time.format.DateTimeFormatter.parse( at com.splunk.dbx.server.dbinput.task.processors.ExtractIndexingTimeProcessor.extractTimestampFromString( at com.splunk.dbx.server.dbinput.task.processors.ExtractIndexingTimeProcessor.extractTimestamp( at com.splunk.dbx.server.dbinput.task.processors.ExtractIndexingTimeProcessor.processRecord( at org.easybatch.core.processor.CompositeRecordProcessor.processRecord( at org.easybatch.core.job.BatchJob.processRecord( at org.easybatch.core.job.BatchJob.readAndProcessBatch( at at com.splunk.dbx.server.api.service.conf.impl.InputServiceImpl.runTask( at com.splunk.dbx.server.api.resource.InputResource.lambda$runInput$1( at at java.base/java.util.concurrent.Executors$ at java.base/ at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker( at java.base/java.util.concurrent.ThreadPoolExecutor$ at java.base/


Labels (1)
0 Karma



  • For raising column
    • You should be able to use that column as a raising column without any change
  • For timestamp
    • There is no direct way, to convert it to a timestamp as you mentioned already.


I hope this helps!!! Kindly upvote if this helps!!!

0 Karma

Path Finder
  • For timestamp
    • There is no direct way, to convert it to a timestamp as you mentioned already.


that's my point , I don't understand why there is no support for epoch timestamps in DB connect

0 Karma
Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out &gt;&gt; As our brave ...