topic Re: Convert "20180328212007.496740+180" to human readable format? in Splunk Dev

Convert "20180328212007.496740+180" to human readable format?

test_qweqwe — Fri, 30 Mar 2018 12:47:58 GMT

Hi.
How to convert "20180328212007.496740+180" to human readable format?
And if possible without ignores the time zone offset (+180)?

deepashri_123 — Fri, 30 Mar 2018 13:05:03 GMT

hey@test_qweqwe,

This does not look like an epoch.
Can you try this:
eval time=strftime(strptime("yourtime","%Y%m%d%H%M%S.%6Q+%Ez"),"%Y/%m/%d %H:%M:%S")

Let me know if this helps!!

test_qweqwe — Fri, 30 Mar 2018 18:06:42 GMT

I have No results found.

InstallDate="20170901111017.000000+180"
LastBootUpTime="20180314062957.183621+120"

| eval LastBootUpTime=strftime(strptime("LastBootUpTime","%Y%m%d%H%M%S.%6Q+%Ez"),"%Y/%m/%d %H:%M:%S")

ckeller2791 — Fri, 20 Aug 2021 14:34:22 GMT

This worked for me.

|eval LastBoot=strftime(strptime(LastBootUpTime,"%Y%m%d%H%M%S.%N%Z"),"%Y/%m/%d %H:%M:%S")