Dashboards & Visualizations

Convert time in a field to human readable

tdebonee
Engager

Hello, I have a field called "startTime"

startTime: 1699148280000

I would like to convert it to human readable. Not having any luck.

Any help would be appreciated.

Tags (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

It looks like it might be milliseconds, so divide by 1000 before using strftime() to format it into human readable format.

| eval start_time=strftime(startTime/1000,"%F %T.%3N")

View solution in original post

tdebonee
Engager

Thank you. That worked.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

It looks like it might be milliseconds, so divide by 1000 before using strftime() to format it into human readable format.

| eval start_time=strftime(startTime/1000,"%F %T.%3N")
Get Updates on the Splunk Community!

What's New in Splunk Cloud Platform 9.3.2411?

Hey Splunky People! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2411. This release ...

Buttercup Games: Further Dashboarding Techniques (Part 6)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...