https://community.splunk.com/t5/Splunk-Search/How-to-get-current-time-and-convert-to-epoch/m-p/689800#M235015 <P>There are a couple of functions to returns time, now() which returns the time the search started, and time() which returns the time the function is executed. Both of these functions already return the time in epoch format.</P> Thu, 06 Jun 2024 06:28:05 GMT ITWhisperer 2024-06-06T06:28:05Z https://community.splunk.com/t5/Splunk-Search/How-to-get-current-time-and-convert-to-epoch/m-p/689797#M235012 <P>Hi,<BR /><BR />Is there a way to get current time on Splunk and then convert it to epoch? Im trying to create a dashboard to show inactivity from my data sources and plan to use info from | metadata command.</P> Thu, 06 Jun 2024 06:06:02 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-current-time-and-convert-to-epoch/m-p/689797#M235012 jbv 2024-06-06T06:06:02Z https://community.splunk.com/t5/Splunk-Search/How-to-get-current-time-and-convert-to-epoch/m-p/689800#M235015 <P>There are a couple of functions to returns time, now() which returns the time the search started, and time() which returns the time the function is executed. Both of these functions already return the time in epoch format.</P> Thu, 06 Jun 2024 06:28:05 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-current-time-and-convert-to-epoch/m-p/689800#M235015 ITWhisperer 2024-06-06T06:28:05Z https://community.splunk.com/t5/Splunk-Search/How-to-get-current-time-and-convert-to-epoch/m-p/689802#M235016 <P>Hello&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/263523">@jbv</a>,</P><P>You can get the current time using the now() function. By default it is returned in epoch&nbsp; format only. You can use eval to call a field and you'll get what you want.</P><LI-CODE lang="markup">| eval current_time_epoch=now()</LI-CODE><P>&nbsp;</P><P>Thanks,<BR />Tejas.</P><P>&nbsp;</P><P>---</P><P>If the above solution helps, an upvote is appreciated.!!&nbsp;</P> Thu, 06 Jun 2024 06:28:42 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-current-time-and-convert-to-epoch/m-p/689802#M235016 tej57 2024-06-06T06:28:42Z https://community.splunk.com/t5/Splunk-Search/How-to-get-current-time-and-convert-to-epoch/m-p/689803#M235017 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/263523">@jbv</a>&nbsp;,</P><P>you can use the now() funtion, for more infos see at&nbsp;<A href="https://docs.splunk.com/Documentation/SCS/current/SearchReference/DateandTimeFunctions" target="_blank">https://docs.splunk.com/Documentation/SCS/current/SearchReference/DateandTimeFunctions</A></P><P>You can try something like this:</P><LI-CODE lang="markup">| makeresults | eval current_time=now() | table current_time</LI-CODE><P>it's in epochtime, then you can convert in the format you like.</P><P>Ciao.</P><P>Giuseppe</P> Thu, 06 Jun 2024 06:29:42 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-current-time-and-convert-to-epoch/m-p/689803#M235017 gcusello 2024-06-06T06:29:42Z https://community.splunk.com/t5/Splunk-Search/How-to-get-current-time-and-convert-to-epoch/m-p/689820#M235020 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/263523">@jbv</a>&nbsp;,</P><P>good for you, see next time!</P><P>Ciao and happy splunking</P><P>Giuseppe</P><P>P.S.: Karma Points are appreciated by all the contributors <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Thu, 06 Jun 2024 09:00:58 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-current-time-and-convert-to-epoch/m-p/689820#M235020 gcusello 2024-06-06T09:00:58Z