Dashboards & Visualizations

How to convert epoch time field when using it as value in chart command

mah
Builder

Hi,

I have a table built with a chart command : 

| stats count  by _time Id statut
| xyseries Id statut _time

Before using xyseries command, _time values was readable but after applying xyseries command we get epoch time like this :

mah_0-1632154167797.png

Can you help me to transform the epoch time to readable time ?

Labels (1)
0 Karma
1 Solution

ashvinpandey
Contributor

@mah use the below command :

| convert ctime(field_name1) ctime(fieldname2) ctime(fieldname3)

Also, If this reply helps you, an upvote would be appreciated

View solution in original post

ashvinpandey
Contributor

@mah use the below command :

| convert ctime(field_name1) ctime(fieldname2) ctime(fieldname3)

Also, If this reply helps you, an upvote would be appreciated

mah
Builder

@ashvinpandey thanks a lot ! It works properly

0 Karma
Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...