https://community.splunk.com/t5/Splunk-Search/get-epoch-time-from-string-time-example-from-20090930-to-epoch/m-p/181432#M186864 <P>get epoch time from string time example from 20090930 to epoch time?</P> Thu, 23 Oct 2014 09:10:36 GMT srinathd 2014-10-23T09:10:36Z https://community.splunk.com/t5/Splunk-Search/get-epoch-time-from-string-time-example-from-20090930-to-epoch/m-p/181432#M186864 <P>get epoch time from string time example from 20090930 to epoch time?</P> Thu, 23 Oct 2014 09:10:36 GMT https://community.splunk.com/t5/Splunk-Search/get-epoch-time-from-string-time-example-from-20090930-to-epoch/m-p/181432#M186864 srinathd 2014-10-23T09:10:36Z https://community.splunk.com/t5/Splunk-Search/get-epoch-time-from-string-time-example-from-20090930-to-epoch/m-p/181433#M186865 <P>Hi srinathd,</P> <P>based on your provided example try this run everywhere command:</P> <PRE><CODE>index=_internal | head 1 | eval foo="20090930" | eval boo=strptime(foo, "%Y%m%d") | table foo, boo </CODE></PRE> <P>where <CODE>boo</CODE> will be the epoch time. You can verify it by running this search:</P> <PRE><CODE>index=_internal | head 1 | eval foo="20090930" | eval boo=strptime(foo, "%Y%m%d") | convert ctime(boo) AS newTime | table foo, boo, newTime </CODE></PRE> <P>hope this helps ...</P> <P>cheers, MuS</P> Thu, 23 Oct 2014 09:42:33 GMT https://community.splunk.com/t5/Splunk-Search/get-epoch-time-from-string-time-example-from-20090930-to-epoch/m-p/181433#M186865 MuS 2014-10-23T09:42:33Z