use correct table name & canonicalize timestamp in query