Alerting

Getting dates, times in alert emails into a consistent format

HarAtWork
Explorer

Splunk randomly varies the style in which dates and times are available. In an alert email, $job.trigger_date$ comes out as "March 04, 2023", and then I have to have it display $job.trigger_timeHMS$ afterwards to get "21:45:06 -0500". On the other hand, $job.earliestTime$ comes out "2023-03-04T20:00:00.000-05 00" and $job.latestTime comes out similarly.

Is there a way to get them all to come out consistently formatted like "March 4, 2023, 21:45:06"? (And then I can suffix it with "Eastern Time".)

Labels (1)
Tags (3)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

https://ideas.splunk.com

---
If this reply helps you, Karma would be appreciated.
0 Karma

HarAtWork
Explorer

That's the home page of a posting board.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

It's where we go to suggest enhancements and report problems such as this one.  There's no much else we can do about inconsistencies in Splunk's code.

---
If this reply helps you, Karma would be appreciated.

HarAtWork
Explorer

Oh, I see. I didn't realize you were telling me what I now think you're telling me, that there isn't currently any solution for achieving the result I was looking for.

Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...