https://community.splunk.com/t5/Splunk-Search/Splunk-time-format-conversions/m-p/642161#M222448 <P>Use the <FONT face="courier new,courier">strptime</FONT> function to convert the time into epoch form then use <FONT face="courier new,courier">strftime</FONT> to convert the epoch into the desired result.</P><LI-CODE lang="markup">| eval foo = strftime(strptime(foo, "%Y-%m-%dT%H:%M:%S%Z"), "%Y-%m-%d %H:%M:%S")</LI-CODE><P>&nbsp;</P> Wed, 03 May 2023 16:58:49 GMT richgalloway 2023-05-03T16:58:49Z https://community.splunk.com/t5/Splunk-Search/Splunk-time-format-conversions/m-p/642141#M222442 <P>How do I convert the below time format&nbsp;</P><P>2023-05-02T02:35:47Z into</P><P>2023-05-03 15:37:22</P> Wed, 03 May 2023 15:39:00 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-time-format-conversions/m-p/642141#M222442 pavanae 2023-05-03T15:39:00Z https://community.splunk.com/t5/Splunk-Search/Splunk-time-format-conversions/m-p/642161#M222448 <P>Use the <FONT face="courier new,courier">strptime</FONT> function to convert the time into epoch form then use <FONT face="courier new,courier">strftime</FONT> to convert the epoch into the desired result.</P><LI-CODE lang="markup">| eval foo = strftime(strptime(foo, "%Y-%m-%dT%H:%M:%S%Z"), "%Y-%m-%d %H:%M:%S")</LI-CODE><P>&nbsp;</P> Wed, 03 May 2023 16:58:49 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-time-format-conversions/m-p/642161#M222448 richgalloway 2023-05-03T16:58:49Z