This page explains how to use the unixtime_milliseconds_todatetime function in APL.
unixtime_milliseconds_todatetime
converts a Unix timestamp that is expressed in whole milliseconds since 1970-01-01 00:00:00 UTC to an APL datetime
value.
Use the function whenever you ingest data that stores time as epoch milliseconds (for example, JSON logs from NGINX or metrics that follow the StatsD line protocol). Converting to datetime
lets you bin, filter, and visualize events with the rest of your time-series data.
Splunk SPL users
unixtime_milliseconds_todatetime()
corresponds to an eval
expression that divides the epoch value by 1000 and formats the result. You skip both steps in APL because the function takes milliseconds directly.ANSI SQL users
FROM_UNIXTIME()
or TO_TIMESTAMP()
in SQL dialects. In APL, you don’t divide by 1,000 because the function expects milliseconds.Name | Type | Description |
---|---|---|
milliseconds | int or long | Whole milliseconds since the Unix epoch. Fractional input is truncated. |
datetime
value that represents the given epoch milliseconds at UTC precision (1 millisecond).
_time | epoch_milliseconds | datetime_standard |
---|---|---|
May 15, 12:09:22 | 1,747,303,762 | 2025-05-15T10:09:22Z |
datetime
value.datetime
value.datetime
value.