<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to convert _time to a human readable format and display Time and Date in a single value panel? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-convert-time-to-a-human-readable-format-and-display-Time/m-p/162977#M10021</link>
    <description>&lt;P&gt;Try this&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;host ="10.0.33.210" | chart first(_time) as Time | convert ctime(Time)
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Other options&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;host ="10.0.33.210" | chart first(_time) as Time | eval Time=strftime(Time,"%Y/%m/%d %H:%M:%S")

host ="10.0.33.210" | chart first(_time) as Time | eval Time=strftime(Time,"%+")
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Fri, 19 Dec 2014 22:47:59 GMT</pubDate>
    <dc:creator>somesoni2</dc:creator>
    <dc:date>2014-12-19T22:47:59Z</dc:date>
    <item>
      <title>How to convert _time to a human readable format and display Time and Date in a single value panel?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-convert-time-to-a-human-readable-format-and-display-Time/m-p/162976#M10020</link>
      <description>&lt;P&gt;This sounds easy but I can't seem to figure it out.  I'm creating an "Admin" dashboard and a couple of the panels are time last "x" tool ran.  The most recent event received from host "x" is what I need to retrieve a time stamp from and post it in a panel.&lt;BR /&gt;&lt;BR /&gt;
Currently I have this &lt;BR /&gt;
&lt;CODE&gt; host ="10.0.33.210" |  chart first(_time) &lt;/CODE&gt; &lt;/P&gt;

&lt;P&gt;which outputs :    1418565983&lt;/P&gt;

&lt;P&gt;How do I convert that into readable time and date?&lt;BR /&gt;
I'm attempting to just use a single value panel.&lt;/P&gt;

&lt;P&gt;Thanks in advance.&lt;/P&gt;</description>
      <pubDate>Fri, 19 Dec 2014 21:12:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-convert-time-to-a-human-readable-format-and-display-Time/m-p/162976#M10020</guid>
      <dc:creator>jclehmuth</dc:creator>
      <dc:date>2014-12-19T21:12:03Z</dc:date>
    </item>
    <item>
      <title>Re: How to convert _time to a human readable format and display Time and Date in a single value panel?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-convert-time-to-a-human-readable-format-and-display-Time/m-p/162977#M10021</link>
      <description>&lt;P&gt;Try this&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;host ="10.0.33.210" | chart first(_time) as Time | convert ctime(Time)
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Other options&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;host ="10.0.33.210" | chart first(_time) as Time | eval Time=strftime(Time,"%Y/%m/%d %H:%M:%S")

host ="10.0.33.210" | chart first(_time) as Time | eval Time=strftime(Time,"%+")
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 19 Dec 2014 22:47:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-convert-time-to-a-human-readable-format-and-display-Time/m-p/162977#M10021</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2014-12-19T22:47:59Z</dc:date>
    </item>
    <item>
      <title>Re: How to convert _time to a human readable format and display Time and Date in a single value panel?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-convert-time-to-a-human-readable-format-and-display-Time/m-p/162978#M10022</link>
      <description>&lt;P&gt;That worked thanks.  I can't believe I couldn't figure that out.&lt;/P&gt;</description>
      <pubDate>Fri, 19 Dec 2014 23:27:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-convert-time-to-a-human-readable-format-and-display-Time/m-p/162978#M10022</guid>
      <dc:creator>jclehmuth</dc:creator>
      <dc:date>2014-12-19T23:27:15Z</dc:date>
    </item>
  </channel>
</rss>

