https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154781#M43523 <P>2/11/2020 11:49:00 AM 2/11/2020 9:55:00 PM</P> <P>How to convert this into Secs.. Conersion of AM and PM is not working as expected</P> <P>| eval "Bridge End Date In Sec"=tonumber(strftime(strptime('Bridge End Date',"%m/%d/%Y %H:%M:%S %p"),"%s")) <BR /> | eval "Bridge Start Date In Sec"=tonumber(strftime(strptime('Bridge Start Date',"%m/%d/%Y %H:%M:%S %p"),"%s")) </P> Thu, 05 Mar 2020 20:26:28 GMT ashanka 2020-03-05T20:26:28Z https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154772#M43514 <P>I have a time in the format of: <BR /> 3:21:34 AM 12/8/2014</P> <P>I'm trying to convert this to epoch time. Can anyone lend a hand?</P> <P>Thanks!</P> Mon, 08 Dec 2014 17:43:46 GMT https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154772#M43514 hagjos43 2014-12-08T17:43:46Z https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154773#M43515 <P>try this</P> <P>eval t="your time field"</P> Mon, 08 Dec 2014 17:53:28 GMT https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154773#M43515 kml_uvce 2014-12-08T17:53:28Z https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154774#M43516 <P>Thanks, but that did not work <span class="lia-unicode-emoji" title=":disappointed_face:">😞</span><BR /> Returns a result like this: 10:26:26 AM 12/2/2014</P> <P>My query is: <BR /> sourcetype=WinEventLog:Security EventCode=520 | eval t=New_Time</P> Mon, 08 Dec 2014 18:11:57 GMT https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154774#M43516 hagjos43 2014-12-08T18:11:57Z https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154775#M43517 <P>try this..<BR /> eval t=_time</P> <P>t will be your new field</P> Mon, 08 Dec 2014 18:26:32 GMT https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154775#M43517 kml_uvce 2014-12-08T18:26:32Z https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154776#M43518 <P>Try any of strptime or convert command. </P> <P>e.g.</P> <PRE><CODE>| gentimes start=-1 | eval YourDate="3:21:34 AM 12/8/2014" | table YourDate | eval epoch1=strptime(YourDate,"%H:%M:%S %p %m/%d/%Y") | convert timeformat="%H:%M:%S %p %m/%d/%Y" mktime(YourDate) as epoch2 </CODE></PRE> Mon, 08 Dec 2014 18:53:56 GMT https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154776#M43518 somesoni2 2014-12-08T18:53:56Z https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154777#M43519 <P>Perfect, thank you very much!</P> Wed, 10 Dec 2014 15:52:18 GMT https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154777#M43519 hagjos43 2014-12-10T15:52:18Z https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154778#M43520 <P>I got same results for both AM and PM </P> Sun, 30 Jul 2017 04:43:31 GMT https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154778#M43520 nagarjuna280 2017-07-30T04:43:31Z https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154779#M43521 <P>Can you tell me what is the unit of the time which is converted to Epoch format?<BR /> @somesoni2</P> Wed, 24 Jan 2018 10:17:22 GMT https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154779#M43521 pratikkadam 2018-01-24T10:17:22Z https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154780#M43522 <P>It's in seconds</P> Wed, 24 Jan 2018 10:39:13 GMT https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154780#M43522 493669 2018-01-24T10:39:13Z https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154781#M43523 <P>2/11/2020 11:49:00 AM 2/11/2020 9:55:00 PM</P> <P>How to convert this into Secs.. Conersion of AM and PM is not working as expected</P> <P>| eval "Bridge End Date In Sec"=tonumber(strftime(strptime('Bridge End Date',"%m/%d/%Y %H:%M:%S %p"),"%s")) <BR /> | eval "Bridge Start Date In Sec"=tonumber(strftime(strptime('Bridge Start Date',"%m/%d/%Y %H:%M:%S %p"),"%s")) </P> Thu, 05 Mar 2020 20:26:28 GMT https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154781#M43523 ashanka 2020-03-05T20:26:28Z https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154782#M43524 <PRE><CODE>| eval "Bridge End Date In Sec"=strptime('Bridge End Date',"%m/%d/%Y %H:%M:%S %p") | eval "Bridge Start Date In Sec"=strptime('Bridge Start Date',"%m/%d/%Y %H:%M:%S %p") </CODE></PRE> Thu, 05 Mar 2020 22:08:39 GMT https://community.splunk.com/t5/Splunk-Search/Convert-this-time-format-to-epoch/m-p/154782#M43524 to4kawa 2020-03-05T22:08:39Z