Hello,
I'm stumped...I'm trying to correctly display 'Date' in a scheduled CSV report. Within Splunk, date is displayed correctly:
_time
10/10/13 8:48:57.000 AM
Within CSV report:
_time
1380916998
Also tried this: |convert ctime(_time) as timestamp
But timestamp displays 10:30.1 which I than have to format cell to recognize 'Date' value. (10/6/13 12:10 PM)
Took a little time to play with it but it worked!
Thank you
Please mark my answer as accepted.
Have you tried | eval ts=strftime(_time, "%m/%d/%y %H:%M %p")
?