Splunk randomly varies the style in which dates and times are available. In an alert email, $job.trigger_date$ comes out as "March 04, 2023", and then I have to have it display $job.trigger_timeHMS$ afterwards to get "21:45:06 -0500". On the other hand, $job.earliestTime$ comes out "2023-03-04T20:00:00.000-05 00" and $job.latestTime comes out similarly.
Is there a way to get them all to come out consistently formatted like "March 4, 2023, 21:45:06"? (And then I can suffix it with "Eastern Time".)
That's the home page of a posting board.
It's where we go to suggest enhancements and report problems such as this one. There's no much else we can do about inconsistencies in Splunk's code.
Oh, I see. I didn't realize you were telling me what I now think you're telling me, that there isn't currently any solution for achieving the result I was looking for.