Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Splunk DB Connect 1: How to parse a dbquery search string to convert Unix timestamps to a readable format and create a timechart?

$
0
0
I have a string like this; | dbquery MYDATABASE "Select trunc(ph.x_rqst_date) bp_date,count(ph.objid) bpcount,ph.x_ics_rcode _code, X_AUTH_RESPONSE paymen_code,ph.x_payment_type type from x_program_purch_hdr ph where x_rqst_type='CREDITCARD_PURCH' AND ph.x_payment_type IN ('ENROLLMENT','RECURRING') and ph.x_rqst_date >= Trunc(sysdate)-1 and ph.x_rqst_date < Trunc(sysdate) GROUP BY trunc(ph.x_rqst_date),ph.x_ics_rcode,X_AUTH_RESPONSE,ph.x_payment_type" But I cannot parse this query with things like `|timechart count by code limit=25`. Am I missing something? I want to convert all the unreadable unix timestamps to readable, and make a timechart.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>