Currently looking at trying to convert what i think is 10 digit Unix/Epoc time into a human readable format but struggling to find the right syntax.
"timestamp" field values:
Any assistance would be appreciated, happy to provide more info if needed!
Fiddled around a little but got to this eventually:
| eval timestamp=strftime(timestamp, "%Y-%m-%d")
Thanks for pushing me in the right direction 🙂