unixtime_nanoseconds_todatetime
This page explains how to use the unixtime_nanoseconds_todatetime function in APL.
unixtime_nanoseconds_todatetime
converts a Unix timestamp that is expressed in whole nanoseconds since 1970-01-01 00:00:00 UTC to an APL datetime
value.
Use the function whenever you ingest data that stores time as epoch nanoseconds (for example, JSON logs from NGINX or metrics that follow the StatsD line protocol). Converting to datetime
lets you bin, filter, and visualize events with the rest of your time-series data.
For users of other query languages
If you come from other query languages, this section explains how to adjust your existing queries to achieve the same results in APL.
Splunk SPL users
Splunk SPL users
Splunk SPL usually stores _time
in seconds and uses functions such as strftime
or strptime
for conversion. In APL, you pass the nanosecond integer directly to unixtime_nanoseconds_todatetime
, so you don’t divide by 1,000,000,000 first.
ANSI SQL users
ANSI SQL users
Many SQL engines use TO_TIMESTAMP_LTZ()
or similar functions that expect seconds or microseconds. In APL, you pass the nanosecond value directly, and the function returns a datetime
(UTC).
Usage
Syntax
Parameters
Name | Type | Description |
---|---|---|
nanoseconds | int or long | Whole nanoseconds since the Unix epoch. Fractional input is truncated. |
Returns
A datetime
value that represents the given epoch nanoseconds at UTC precision (1 nanosecond).
Use case example
The HTTP access logs keep the timestamp as epoch nanoseconds and you want to convert the values to datetime.
Query
Output
_time | epoch_nanoseconds | datetime_standard |
---|---|---|
May 15, 12:09:22 | 1,747,303,762 | 2025-05-15T10:09:22Z |
This query converts the timestamp to epoch nanoseconds and then back to datetime for demonstration purposes.
List of related functions
- unixtime_microseconds_todatetime: Converts a Unix timestamp expressed in whole microseconds to an APL
datetime
value. - unixtime_milliseconds_todatetime: Converts a Unix timestamp expressed in whole milliseconds to an APL
datetime
value. - unixtime_seconds_todatetime: Converts a Unix timestamp expressed in whole seconds to an APL
datetime
value.