Change the 'oldest' and 'latest' field values to readible time format using 'strptime' command

[lawannapage]

I'm having trouble changing the 'oldest' and 'latest' field values from epoch time to readible time format using 'strptime' command:

| dbinspect index= | stats min(startEpoch) as oldest max(endEpoch) as latest by index | join type=outer [| rest /services/data/indexes/ | fields title currentDBSizeMB frozenTimePeriodInSecs maxTotalDataSizeMB | rename title as index] | eval premature_aging=if(((now() - 188697600)*1.1) < oldest,"smoke…fire?","aging nicely")

I would appreciate if anyone could help me out.

[somesoni2]

The command to use here is strftime (epoch to string) not strptime (string to epoch), or use convert command's ctime funtion.

Try like this

| dbinspect index= | stats min(startEpoch) as oldest max(endEpoch) as latest by index | join type=outer [| rest /services/data/indexes/ | fields title currentDBSizeMB frozenTimePeriodInSecs maxTotalDataSizeMB | rename title as index] | eval premature_aging=if(((now() - 188697600)*1.1) < oldest,"smoke…fire?","aging nicely") | convert ctime(oldest) ctime(latest) timeformat="%F %T"