EPOCH CONVERSION IN ORACLE QUERY

[harshavrath]

Hi,

I need to convert the EPOCH Time using Oracle Query,by using DB Query i have figured out using the below query it can be done

|dbquery DB_NAME limit=10 "Select * from Table_NM" |fieldformat NEW_CREATED_DT=strftime(CREATED_DT,"%d-%m-%y %H:%M:%S")

But i want the query that can be used in Oracle.

Any Help is Appreciated,

Thanks.

[harshavrath · Accepted solution]

I found the answer myself just to_char(date_attribute,'YYYY-MM-DD HH24:MI:SS')date_attribute will work no need of trying to convert it by multiplying & dividing the current time with 1970.

[linu1988]

yes because ,thats no longer a date field. but a good trick

[harshavrath]

I will be indexing my DB table under DB Inputs.Using Input_Type=tail.

[harshavrath]

Sorry linu i couldn't understand you, can you be a bit more specific.

[linu1988]

if it is the summary index you can use as it is in a savedsearch. If you are trying to use dbmon then the sql query will index and while tabulating or creating dashboard you have to do the time conversion again.

[harshavrath]

I need the query as i would be using it to input a table & index into Splunk.

[linu1988]

oracle is not doing the time conversion its splunk which is converting the date field. you need to do the above to get the human readable format.