https://community.splunk.com/t5/Splunk-Search/How-to-format-timechart-time-values-easily/m-p/50373#M12111 <P>I personally check the strftime man pages on any UNIX system I happen to have nearby. They're available on the web too, of course: <A href="http://linux.die.net/man/3/strftime">http://linux.die.net/man/3/strftime</A> for instance.</P> Thu, 29 Aug 2013 16:37:53 GMT Ayn 2013-08-29T16:37:53Z https://community.splunk.com/t5/Splunk-Search/How-to-format-timechart-time-values-easily/m-p/50369#M12107 <P>Not a splunk newbie, but I cant seem to figure out how to format my timechart values to be readable. The default format:</P> <P>2013-08-28T14:30:00.000-04:00</P> <P>Is not ideal for reading, and is normally too much information.</P> Wed, 28 Aug 2013 21:07:42 GMT https://community.splunk.com/t5/Splunk-Search/How-to-format-timechart-time-values-easily/m-p/50369#M12107 ericrobinson 2013-08-28T21:07:42Z https://community.splunk.com/t5/Splunk-Search/How-to-format-timechart-time-values-easily/m-p/50370#M12108 <P>Use <CODE>fieldformat</CODE> to create the format you want.</P> <PRE><CODE>... | timechart ... | fieldformat _time=strftime(_time,"%+") </CODE></PRE> <P>For some inspiration on format strings, visit <A href="http://strfti.me/">http://strfti.me/</A></P> Wed, 28 Aug 2013 21:12:27 GMT https://community.splunk.com/t5/Splunk-Search/How-to-format-timechart-time-values-easily/m-p/50370#M12108 Ayn 2013-08-28T21:12:27Z https://community.splunk.com/t5/Splunk-Search/How-to-format-timechart-time-values-easily/m-p/50371#M12109 <P>(Not having tried this yet...) does it keep the format for any tooltips as well?</P> Wed, 28 Aug 2013 23:36:14 GMT https://community.splunk.com/t5/Splunk-Search/How-to-format-timechart-time-values-easily/m-p/50371#M12109 sowings 2013-08-28T23:36:14Z https://community.splunk.com/t5/Splunk-Search/How-to-format-timechart-time-values-easily/m-p/50372#M12110 <P>This seems to work great, but where can I find the options for strftime? I dont see a "%+" formatting option from your link..</P> Thu, 29 Aug 2013 16:11:15 GMT https://community.splunk.com/t5/Splunk-Search/How-to-format-timechart-time-values-easily/m-p/50372#M12110 ericrobinson 2013-08-29T16:11:15Z https://community.splunk.com/t5/Splunk-Search/How-to-format-timechart-time-values-easily/m-p/50373#M12111 <P>I personally check the strftime man pages on any UNIX system I happen to have nearby. They're available on the web too, of course: <A href="http://linux.die.net/man/3/strftime">http://linux.die.net/man/3/strftime</A> for instance.</P> Thu, 29 Aug 2013 16:37:53 GMT https://community.splunk.com/t5/Splunk-Search/How-to-format-timechart-time-values-easily/m-p/50373#M12111 Ayn 2013-08-29T16:37:53Z