Getting Data In

How to convert timestamp into proper date

sahityasweety
Explorer

Hello Splunk Community,

I am trying to extract the "timestamp":"1715235824441" with proper details.
Could anyone help me on this.
Thanks in advance .

 

Regards,
Sahitya

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @sahityasweety,

this timestamp seems to be in epochtime, so to transfrom it in human readable format you can use the strftime function in the eval command.

e.g. to transform in format yyy-mm-dd HH:MM:SS, you could try:

| eval timestamp=strftime(timetampo,"%Y-%m-%d %H:%M:%S")

Ciao.

Giuseppe

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...

Introduction to Splunk AI

How are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. Lucky for ...