Join the Conversation
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- Time format
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Time format
Hi,
I am using DB connect to fetch a table from the database which the table was imported as an Excel to the database. But, the problem is the time is showing like 1396760400.000 and tried different commands like convert, replace and other ones but the date is not changing. Also, when I tried just to rename the header of the field, I could not either. So, I have no idea what the problem is.
Idea/ suggestion would be great
Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
the date format that you are getting is an EPOCH time you can convert it by
to__char(date_field, 'DD-MON-YYYY HH24:MI:SS')
ex:SELECT to__char(date_filed, 'dd-mm-yyyy hh24:mi:ss AM') FROM table_name
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
you wont be able to get in normal sql query. you need to do it splunk query. What is the database you are using?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Non of these worked not because they are wrong but I am not able to change anything in the particular column. Idea in how to fix this issue
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
try this even this works
fieldformat new_date=strftime(dat_field,"%d-%m-%Y %H: %M: %S")
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
try of convert ctime(datetime_column) is working?
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Unlocking Unified Insights: New Gigamon Federated Search App for Splunk
GA: New Data Management App in Splunk Platform
Announcing Modern Navigation: A New Era of Splunk User Experience
