Getting Data In

epoch _time conversion

_dave_b
Communicator

Hello,

I'm trying to retrieve a readable time value from a time stamp, so I ran this command:

eval "Time of most recent Update"=tostring(_time,"duration") 

and I get back a value like this:

16723+03:58:46.647379

when _time is originally 2015 10-14 23:10:54.111
This looks suspect to me. Is 16723+03:58:46.647379 the correct value? How do I interpret it?

Thanks

0 Karma
1 Solution

sundareshr
Legend

duration is time in seconds. For a human readable time format, look at strftime() In you example strftime(_time, "%Y %M%D") would give you 2015 10 14.

View solution in original post

0 Karma

sundareshr
Legend

duration is time in seconds. For a human readable time format, look at strftime() In you example strftime(_time, "%Y %M%D") would give you 2015 10 14.

0 Karma

_dave_b
Communicator

Thanks! That helped a lot

0 Karma
Get Updates on the Splunk Community!

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...