topic Convert Epoch Time to a different timezone using SPL in Splunk Search

Convert Epoch Time to a different timezone using SPL

jason_hotchkiss — Wed, 27 Dec 2023 19:13:11 GMT

I have the follow time:

EPOCH HUMAN READABLE

1703630919

12/26/2023 19:48:39

I would like to convert the EPOCH to CST time.

Currently I am testing the following, but I am curious to know if there is an easier way.

Results in:

_time	cst_offset	cst_time	utc_time
2023-12-26 19:48:39	1703667600.000000	16:48.CST	22:48.UTC

Re: Convert Epoch Time to a different timezone using SPL

isoutamo — Wed, 27 Dec 2023 19:15:49 GMT

Hi
You could set TZ on GUI. Modify user preference with selecting correct TZ.
r. Ismo

Re: Convert Epoch Time to a different timezone using SPL

jason_hotchkiss — Wed, 27 Dec 2023 19:16:52 GMT

Yes, I could. However, this is going to be a report, and for a different timezone.

Re: Convert Epoch Time to a different timezone using SPL

isoutamo — Wed, 27 Dec 2023 19:26:13 GMT

Unfortunately there is no function to do this kind of action. Basically you could do your own command to do it, but probably easier way is use e.g. lookup which contains offsets and then macro which return that value based on utc time + offset calculation.