Splunk recognizing Julian Date and Elapsed Seconds

Someone pointed out to me that the number given in my example is the Julian Date Number (JDN), not the Julian Date. There is a slight difference between the two as the JDN truncates the effective date and the variant is set to noon GMT. There is a specific formula to express this in UNIX time. Unfortunately, that part requires math and I don't believe there is a way, currently, to use a transform to modify the indexing date field on the fly so until the product is enhanced to handle this case, it will not be possible to recognize an MJD automatically.

However, it CAN be done at search time using the following formula:

UNIX Time = { (Julian Date Number <a field extraction> – Unix Epoch <expressed in Julian Date Number notation>) * seconds in a day – Julian Date Number GMT Offset <expressed in seconds> } + Number of seconds since midnight <a field extraction>

Here are the extractions:

EXTRACT-jdn = (?i)^(?P<jdn>[^ ]+)
EXTRACT-ssm = (?i)^[^ ]* (?P<ssm>[^ ]+)

And here is a sample search:

sourcetype="test" | eval uepoch = ((jdn - 2440587.5) * (60 * 60 * 24)) - (60 * 60 * 12) + ssm | eval logdate = strftime(uepoch,"%c %Z")