Getting Data In

Splunk DB Connect 1: Why is my inputs.conf configuration not changing the time format of timestamps (ex: 1355293814.207) for data fetched from MS SQL?

nitesh218ss
Communicator

In inputs.conf file of local folder, I changed this, but the format is not being applied.

index = default
output.format = csv
output.timestamp = 0
output.timestamp.column = CreateTime
output.timestamp.parse.format = yyyy-MM-dd' 'HH:mm:ss.SSS' 'Z
output.timestamp.format = yyyy-MM-dd' 'HH:mm:ss' 'Z
query = SELECT RequestID,TransactionID,PWMTrxID,CreateTime FROM TRANSACTIONS limit=10
table = TRANSACTIONS
tail.rising.column = CreateTime
0 Karma
1 Solution

rsennett_splunk
Splunk Employee
Splunk Employee

Take a look here
http://answers.splunk.com/answers/71191/db-connect-timestamp-format.html
There are also several other interesting answers which I found when I used Google to search for:
splunk answers output.timestamp.format

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!

View solution in original post

rsennett_splunk
Splunk Employee
Splunk Employee

Take a look here
http://answers.splunk.com/answers/71191/db-connect-timestamp-format.html
There are also several other interesting answers which I found when I used Google to search for:
splunk answers output.timestamp.format

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!

jcoates_splunk
Splunk Employee
Splunk Employee

thanks rsennett_splunk -- my general advice for this sort of thing is to switch to SQL formatting if SPL formatting isn't working, and vice versa.

DB Connect 2 has some nice GUI options for getting time formatting figured out, that might be a good choice here too.

nitesh218ss
Communicator

ok but db2 is only support by java8 that y i use db1

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...