Why am I unable to use strptime() function?

[POR160893]

Hi,

I am unable to use strptime() here correctly.

My code is:
index="ABC"
| eval time=strptime(_time, "%Y-%m-%dT%H:%M:%S")
| bin time span=15m
| table time

But the table has no output .....

Can you please help?
Thanks!

[gcusello]

Hi @POR160893,

_time is already in epochtime, even if is displayed in human readable, so you can directlòy use it in timechart:

index="ABC"
| timechart span=15m count

if instead you want to list all _time in epochtime yu can use rename:

index="ABC"
| bin span=15m _time 
| rename _time AS time
| table time

Ciao.

Giuseppe