topic time stamp in Splunk Enterprise https://community.splunk.com/t5/Splunk-Enterprise/time-stamp/m-p/580429#M11083 <P>Hello,&nbsp;</P><P>need assistance on time format&nbsp;</P><P>input :&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; output :&nbsp; %F&nbsp; &nbsp; (2021-11-23)</P><P>23 Nov</P><P>11/23/21</P><P>11/23/2021</P> Mon, 10 Jan 2022 10:37:55 GMT shreyasamin64 2022-01-10T10:37:55Z time stamp https://community.splunk.com/t5/Splunk-Enterprise/time-stamp/m-p/580429#M11083 <P>Hello,&nbsp;</P><P>need assistance on time format&nbsp;</P><P>input :&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; output :&nbsp; %F&nbsp; &nbsp; (2021-11-23)</P><P>23 Nov</P><P>11/23/21</P><P>11/23/2021</P> Mon, 10 Jan 2022 10:37:55 GMT https://community.splunk.com/t5/Splunk-Enterprise/time-stamp/m-p/580429#M11083 shreyasamin64 2022-01-10T10:37:55Z Re: time stamp https://community.splunk.com/t5/Splunk-Enterprise/time-stamp/m-p/580438#M11085 <P>Hi</P><P>here is list of those abbreviations&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Commontimeformatvariables" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Commontimeformatvariables</A></P><P>You could convert those from string to epoch with strptime and from epoch to string with strftime.</P><LI-CODE lang="markup">| makeresults | eval time1="23 Nov", time2="11/23/21", time3="11/23/2021" | eval time1s=strftime(strptime(time1,"%d %b"),"%F"), time2s=strftime(strptime(time2,"%m/%d/%y"),"%F"), time3s=strftime(strptime(time3,"%m/%d/%Y"),"%F") | table time1 time1s time2 time2s time3 time3s</LI-CODE><P>r. Ismo&nbsp;</P> Mon, 10 Jan 2022 11:34:56 GMT https://community.splunk.com/t5/Splunk-Enterprise/time-stamp/m-p/580438#M11085 isoutamo 2022-01-10T11:34:56Z