https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Time-Conversion/m-p/534346#M4571 <P>Thanks Kindly!&nbsp;<BR /><BR />Fiddled around a little but got to this eventually:</P><P>| eval timestamp=strftime(timestamp, "%Y-%m-%d")<BR /><BR />Thanks for pushing me in the right direction <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span>&nbsp;</P> Tue, 29 Dec 2020 12:47:55 GMT OiskyPoisky 2020-12-29T12:47:55Z https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Time-Conversion/m-p/534338#M4569 <P>Morning Team,</P><P>Currently looking at trying to convert what i think is 10 digit Unix/Epoc time into a human readable format but struggling to find the right syntax.</P><P>"timestamp" field values:</P><P>1561012289<BR />1561012304<BR />1561012315<BR />1609193962</P><P>&nbsp;</P><P>Any assistance would be appreciated, happy to provide more info if needed!</P> Tue, 29 Dec 2020 11:51:45 GMT https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Time-Conversion/m-p/534338#M4569 OiskyPoisky 2020-12-29T11:51:45Z https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Time-Conversion/m-p/534339#M4570 <P>try strptime with %S</P> Tue, 29 Dec 2020 11:57:52 GMT https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Time-Conversion/m-p/534339#M4570 to4kawa 2020-12-29T11:57:52Z https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Time-Conversion/m-p/534346#M4571 <P>Thanks Kindly!&nbsp;<BR /><BR />Fiddled around a little but got to this eventually:</P><P>| eval timestamp=strftime(timestamp, "%Y-%m-%d")<BR /><BR />Thanks for pushing me in the right direction <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span>&nbsp;</P> Tue, 29 Dec 2020 12:47:55 GMT https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Time-Conversion/m-p/534346#M4571 OiskyPoisky 2020-12-29T12:47:55Z