Getting Data In

DBConnect changing the date column value automatically to wrong date

pradeepkumarg
Influencer

When I'm querying the data using DBQuery in DBConnect the data is being shown as below

776569  1406755920.000  abc xyz

While the actual data is as below


776569 2014-07-30 17:32:00 abc xyz

The date is being converted to epoch value automatically and also the epoch time is wrong..

This is causing problem to my DBinputs

0 Karma
1 Solution

pmdba
Builder

You can use a SQL function to convert the date to character format that Splunk will recognize. In Oracle this would be something like this:

select to_char(date_field,'YYYY-MM-DD HH24:MI:SS'), other_columns from your_table;

View solution in original post

pmdba
Builder

You can use a SQL function to convert the date to character format that Splunk will recognize. In Oracle this would be something like this:

select to_char(date_field,'YYYY-MM-DD HH24:MI:SS'), other_columns from your_table;

jvspradyumna
Engager

Thanks man! It worked for me as well. Do you know why does it happen that the dates get these kind of values? What value is that?

0 Karma

mchang_splunk
Splunk Employee
Splunk Employee

will it be timezone issue?

0 Karma

jvspradyumna
Engager

I am skeptical about that as splunk can capture current time when you are indexing data. Not sure how to get rid of this issue.

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...