Hello Splunk Community,
I am trying to extract the "timestamp":"1715235824441" with proper details.
Could anyone help me on this.
Thanks in advance .
Regards,
Sahitya
Hi @sahityasweety,
this timestamp seems to be in epochtime, so to transfrom it in human readable format you can use the strftime function in the eval command.
e.g. to transform in format yyy-mm-dd HH:MM:SS, you could try:
| eval timestamp=strftime(timetampo,"%Y-%m-%d %H:%M:%S")
Ciao.
Giuseppe