https://community.splunk.com/t5/Getting-Data-In/Time-formatting-from-a-single-field/m-p/252444#M48530 <P>Thank you. Works perfect.</P> Fri, 18 Mar 2016 16:36:33 GMT muralianup 2016-03-18T16:36:33Z https://community.splunk.com/t5/Getting-Data-In/Time-formatting-from-a-single-field/m-p/252442#M48528 <P>I have a field where time format in: 20020523135537Z which is 05/23/2002 13:53:37 GMT . How can I convert to human readable form in the results ?</P> Fri, 18 Mar 2016 16:11:58 GMT https://community.splunk.com/t5/Getting-Data-In/Time-formatting-from-a-single-field/m-p/252442#M48528 muralianup 2016-03-18T16:11:58Z https://community.splunk.com/t5/Getting-Data-In/Time-formatting-from-a-single-field/m-p/252443#M48529 <P>Here's one way.</P> <PRE><CODE>... | eval timestr = strftime(strptime(field, "%Y%m%d%H%M%S%Z"), "%m/%d/%Y %H:%M:%S %Z") | ... </CODE></PRE> Fri, 18 Mar 2016 16:28:22 GMT https://community.splunk.com/t5/Getting-Data-In/Time-formatting-from-a-single-field/m-p/252443#M48529 richgalloway 2016-03-18T16:28:22Z https://community.splunk.com/t5/Getting-Data-In/Time-formatting-from-a-single-field/m-p/252444#M48530 <P>Thank you. Works perfect.</P> Fri, 18 Mar 2016 16:36:33 GMT https://community.splunk.com/t5/Getting-Data-In/Time-formatting-from-a-single-field/m-p/252444#M48530 muralianup 2016-03-18T16:36:33Z