topic Re: How do I convert serial date time? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-do-I-convert-serial-date-time/m-p/114549#M23957 <P>I would like to do it at index time but doing it at search would be acceptable.</P> Fri, 25 Oct 2013 14:17:57 GMT ckumbier 2013-10-25T14:17:57Z How do I convert serial date time? https://community.splunk.com/t5/Getting-Data-In/How-do-I-convert-serial-date-time/m-p/114547#M23955 <P>How do I convert serial date time (1900 Date System)? For example, I would like to convert <BR /> 41215.10417 to 11/2/12 2:30 AM</P> Thu, 24 Oct 2013 22:59:23 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-I-convert-serial-date-time/m-p/114547#M23955 ckumbier 2013-10-24T22:59:23Z Re: How do I convert serial date time? https://community.splunk.com/t5/Getting-Data-In/How-do-I-convert-serial-date-time/m-p/114548#M23956 <P>Where are you trying to do the conversion? In a search, or at index time?</P> Thu, 24 Oct 2013 23:03:32 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-I-convert-serial-date-time/m-p/114548#M23956 lukejadamec 2013-10-24T23:03:32Z Re: How do I convert serial date time? https://community.splunk.com/t5/Getting-Data-In/How-do-I-convert-serial-date-time/m-p/114549#M23957 <P>I would like to do it at index time but doing it at search would be acceptable.</P> Fri, 25 Oct 2013 14:17:57 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-I-convert-serial-date-time/m-p/114549#M23957 ckumbier 2013-10-25T14:17:57Z Re: How do I convert serial date time? https://community.splunk.com/t5/Getting-Data-In/How-do-I-convert-serial-date-time/m-p/114550#M23958 <P>Converting to unix time worked for me;</P> <PRE><CODE>... | eval AAA = (your_time_field - 25569) * 86400 | convert ctime(AAA) </CODE></PRE> <P>where 25569 is the actual number of days between Jan 1 1900, and Jan 1 1970 (according to some online calendar tool - din't count them myself). </P> <P>Subtract, multiply, convert, ACTION.</P> <P>/K</P> Fri, 25 Oct 2013 19:17:53 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-I-convert-serial-date-time/m-p/114550#M23958 kristian_kolb 2013-10-25T19:17:53Z Re: How do I convert serial date time? https://community.splunk.com/t5/Getting-Data-In/How-do-I-convert-serial-date-time/m-p/114551#M23959 <P>Works for me.</P> Fri, 25 Oct 2013 21:45:31 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-I-convert-serial-date-time/m-p/114551#M23959 ckumbier 2013-10-25T21:45:31Z