topic Re: How do I properly convert to UNIX time using strptime with this specific example? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-do-I-properly-convert-to-UNIX-time-using-strptime-with-this/m-p/429989#M122947 <P>Ahh you're right, I missed that! Thanks!</P> Wed, 12 Dec 2018 19:49:39 GMT russell120 2018-12-12T19:49:39Z How do I properly convert to UNIX time using strptime with this specific example? https://community.splunk.com/t5/Splunk-Search/How-do-I-properly-convert-to-UNIX-time-using-strptime-with-this/m-p/429987#M122945 <P>The new <CODE>myTime</CODE>field is blank for some reason -- anyone know why? Consider the below code I'm using:</P> <PRE><CODE>|makeresults |eval originalTime = "01/05/19" |eval myTime = strptime(originalTime, "%m/%d/%Y") |table originalTime myTime </CODE></PRE> <P>Oddly enough, it DOES work if I use <CODE>|eval originalTime = "11:55"</CODE> with <CODE>eval myTime = strptime(originalTime, "%H:%M")</CODE>. Why won't my original query work? Because of this, I'm unable to convert time to UNIX time in my CSVs.</P> Wed, 12 Dec 2018 19:35:15 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-properly-convert-to-UNIX-time-using-strptime-with-this/m-p/429987#M122945 russell120 2018-12-12T19:35:15Z Re: How do I properly convert to UNIX time using strptime with this specific example? https://community.splunk.com/t5/Splunk-Search/How-do-I-properly-convert-to-UNIX-time-using-strptime-with-this/m-p/429988#M122946 <P>Your string format time is wrong. Try this</P> <PRE><CODE>|makeresults |eval originalTime = "01/05/19" |eval myTime = strptime(originalTime, "%m/%d/%y") |table originalTime myTime </CODE></PRE> <P>Your upper case %Y is for year with century (i.e. 2019) . You specified without century (i.e. 19) which is %y</P> Wed, 12 Dec 2018 19:41:13 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-properly-convert-to-UNIX-time-using-strptime-with-this/m-p/429988#M122946 skoelpin 2018-12-12T19:41:13Z Re: How do I properly convert to UNIX time using strptime with this specific example? https://community.splunk.com/t5/Splunk-Search/How-do-I-properly-convert-to-UNIX-time-using-strptime-with-this/m-p/429989#M122947 <P>Ahh you're right, I missed that! Thanks!</P> Wed, 12 Dec 2018 19:49:39 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-properly-convert-to-UNIX-time-using-strptime-with-this/m-p/429989#M122947 russell120 2018-12-12T19:49:39Z Re: How do I properly convert to UNIX time using strptime with this specific example? https://community.splunk.com/t5/Splunk-Search/How-do-I-properly-convert-to-UNIX-time-using-strptime-with-this/m-p/429990#M122948 <P>It should be lowercase y in the format...</P> <PRE><CODE>| makeresults | eval originalTime = "01/05/19" | eval myTime=strptime(originalTime,"%m/%d/%y") | table originalTime myTime </CODE></PRE> <P>With the strptime function, you must specify the time format of the string X so that the function can convert the string time into the correct UNIX time. <BR /> <A href="http://docs.splunk.com/Documentation/Splunk/7.2.1/SearchReference/DateandTimeFunctions#strptime.28X.2CY.29">http://docs.splunk.com/Documentation/Splunk/7.2.1/SearchReference/DateandTimeFunctions#strptime.28X.2CY.29</A></P> Wed, 12 Dec 2018 19:49:58 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-properly-convert-to-UNIX-time-using-strptime-with-this/m-p/429990#M122948 prakash007 2018-12-12T19:49:58Z