Splunk Search

Convert UTC time to EPOCH

SK2007
Loves-to-Learn Lots

Hi Team,

 

I am finding a way to convert UTC to EPOCH   and vice versa for my search query

 

Sample is here -> date2021-09-04 08:25:56 UTC

0 Karma

PickleRick
SplunkTrust
SplunkTrust

strptime() and strftime() are functions you use to convert between string representation and unix timestamp. But remember that instead of creating a field with string representation of a date you can do a fieldformat, so that internally splunk manipulates the timestamp as integer (it's much easier to do date arithmetics this eay) and only presents the results rendered to given string format.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
0 Karma

SK2007
Loves-to-Learn Lots

I am trying this way,

 

| makeresults
| eval time ="2021-09-04 08:25:56 UTC"
| eval time_ephoc= strptime(time , "%Y-%m-%d %H:%M:%S")| eval timebackUTC=strftime(time_ephoc,"%Y-%m-%d %H:%M:%S UTC")

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...