<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic convert date time to epoch time for sorting in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/convert-date-time-to-epoch-time-for-sorting/m-p/60974#M180144</link>
    <description>&lt;P&gt;How to convert the date and time in the below format to epoch time?&lt;BR /&gt;
201303140216&lt;BR /&gt;
yyyymmddHHMM&lt;BR /&gt;
here hour and minute is in 12 hours clock, so the time may be 02:16PM&lt;BR /&gt;
tried converting it using &lt;BR /&gt;
time=strptime(mytime,"%Y%m%d%I%M") &lt;BR /&gt;
not seems to be working properly...&lt;BR /&gt;
please help&lt;BR /&gt;
Thank You&lt;/P&gt;</description>
    <pubDate>Thu, 14 Mar 2013 10:12:32 GMT</pubDate>
    <dc:creator>smolcj</dc:creator>
    <dc:date>2013-03-14T10:12:32Z</dc:date>
    <item>
      <title>convert date time to epoch time for sorting</title>
      <link>https://community.splunk.com/t5/Splunk-Search/convert-date-time-to-epoch-time-for-sorting/m-p/60974#M180144</link>
      <description>&lt;P&gt;How to convert the date and time in the below format to epoch time?&lt;BR /&gt;
201303140216&lt;BR /&gt;
yyyymmddHHMM&lt;BR /&gt;
here hour and minute is in 12 hours clock, so the time may be 02:16PM&lt;BR /&gt;
tried converting it using &lt;BR /&gt;
time=strptime(mytime,"%Y%m%d%I%M") &lt;BR /&gt;
not seems to be working properly...&lt;BR /&gt;
please help&lt;BR /&gt;
Thank You&lt;/P&gt;</description>
      <pubDate>Thu, 14 Mar 2013 10:12:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/convert-date-time-to-epoch-time-for-sorting/m-p/60974#M180144</guid>
      <dc:creator>smolcj</dc:creator>
      <dc:date>2013-03-14T10:12:32Z</dc:date>
    </item>
    <item>
      <title>Re: convert date time to epoch time for sorting</title>
      <link>https://community.splunk.com/t5/Splunk-Search/convert-date-time-to-epoch-time-for-sorting/m-p/60975#M180145</link>
      <description>&lt;P&gt;If your time is on a 12-hour clock you will need to list AM or PM in your date string, and read that into strptime with %p, without that the hour is ambiguous.&lt;/P&gt;</description>
      <pubDate>Thu, 14 Mar 2013 10:47:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/convert-date-time-to-epoch-time-for-sorting/m-p/60975#M180145</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2013-03-14T10:47:22Z</dc:date>
    </item>
    <item>
      <title>Re: convert date time to epoch time for sorting</title>
      <link>https://community.splunk.com/t5/Splunk-Search/convert-date-time-to-epoch-time-for-sorting/m-p/60976#M180146</link>
      <description>&lt;P&gt;unfortunately i dont have AM or PM specification in the field &lt;span class="lia-unicode-emoji" title=":disappointed_face:"&gt;😞&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 14 Mar 2013 11:03:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/convert-date-time-to-epoch-time-for-sorting/m-p/60976#M180146</guid>
      <dc:creator>smolcj</dc:creator>
      <dc:date>2013-03-14T11:03:46Z</dc:date>
    </item>
    <item>
      <title>Re: convert date time to epoch time for sorting</title>
      <link>https://community.splunk.com/t5/Splunk-Search/convert-date-time-to-epoch-time-for-sorting/m-p/60977#M180147</link>
      <description>&lt;P&gt;How do you expect the conversion to epoch to work then? Guessing?&lt;/P&gt;

&lt;P&gt;If you have sufficient data &lt;EM&gt;and&lt;/EM&gt; a known starting point you could extrapolate AM/PM over a stream of events based on the rollover from 11 to 12, flipping the A/P every time - that's not robust though.&lt;/P&gt;</description>
      <pubDate>Thu, 14 Mar 2013 11:37:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/convert-date-time-to-epoch-time-for-sorting/m-p/60977#M180147</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2013-03-14T11:37:11Z</dc:date>
    </item>
    <item>
      <title>Re: convert date time to epoch time for sorting</title>
      <link>https://community.splunk.com/t5/Splunk-Search/convert-date-time-to-epoch-time-for-sorting/m-p/60978#M180148</link>
      <description>&lt;P&gt;Thanks martin.. I think I have to search some other field for sorting.. Thank you for your help .&lt;/P&gt;</description>
      <pubDate>Fri, 15 Mar 2013 04:23:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/convert-date-time-to-epoch-time-for-sorting/m-p/60978#M180148</guid>
      <dc:creator>smolcj</dc:creator>
      <dc:date>2013-03-15T04:23:38Z</dc:date>
    </item>
  </channel>
</rss>

