topic Re: Getting dates, times in alert emails into a consistent format in Alerting

Getting dates, times in alert emails into a consistent format

HarAtWork — Sun, 05 Mar 2023 03:32:18 GMT

Splunk randomly varies the style in which dates and times are available. In an alert email, $job.trigger_date$ comes out as "March 04, 2023", and then I have to have it display $job.trigger_timeHMS$ afterwards to get "21:45:06 -0500". On the other hand, $job.earliestTime$ comes out "2023-03-04T20:00:00.000-05 00" and $job.latestTime comes out similarly.

Is there a way to get them all to come out consistently formatted like "March 4, 2023, 21:45:06"? (And then I can suffix it with "Eastern Time".)

Re: Getting dates, times in alert emails into a consistent format

richgalloway — Sun, 05 Mar 2023 15:06:48 GMT

https://ideas.splunk.com

Re: Getting dates, times in alert emails into a consistent format

HarAtWork — Sun, 05 Mar 2023 17:10:33 GMT

That's the home page of a posting board.

Re: Getting dates, times in alert emails into a consistent format

richgalloway — Sun, 05 Mar 2023 19:27:59 GMT

It's where we go to suggest enhancements and report problems such as this one. There's no much else we can do about inconsistencies in Splunk's code.

Re: Getting dates, times in alert emails into a consistent format

HarAtWork — Mon, 06 Mar 2023 04:36:43 GMT

Oh, I see. I didn't realize you were telling me what I now think you're telling me, that there isn't currently any solution for achieving the result I was looking for.