returns both time and date together

[smolcj]

Hi,
Using _time we will get the time of the event. so by using earliest(_time), time is produced as the result. is there any function to return both date and time. i.e. time stamp together.

thank you for your time

[Ayn · Accepted solution]

Are you asking how to convert the _time value that you get in epoch format to something more humanly readable? In that case, use convert ctime(earliest(_time)) for that.

[smolcj]

thanks AYN it worked well with ctime

..| convert ctime(_time) as time|stats earliest(time)