Hi everyone!
My time picker token spits out values like "-60m@m" and I want to convert this time value into an epoch time so I can filter based on epoch time. How do I convert this? Can I use strptime() to do it? What format would I tell strptime() the time is in?
Thank you!
| eval epochtime=relative_time(now(),"-60m@m")
your search
| addinfo
| eval your_time=strftime(info_min_time,"%F %T")
try addinfo command. info_min_time is epoch.