Splunk Search

Convert UTC time to EPOCH

SK2007
Loves-to-Learn Lots

Hi Team,

 

I am finding a way to convert UTC to EPOCH   and vice versa for my search query

 

Sample is here -> date2021-09-04 08:25:56 UTC

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

strptime() and strftime() are functions you use to convert between string representation and unix timestamp. But remember that instead of creating a field with string representation of a date you can do a fieldformat, so that internally splunk manipulates the timestamp as integer (it's much easier to do date arithmetics this eay) and only presents the results rendered to given string format.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
0 Karma

SK2007
Loves-to-Learn Lots

I am trying this way,

 

| makeresults
| eval time ="2021-09-04 08:25:56 UTC"
| eval time_ephoc= strptime(time , "%Y-%m-%d %H:%M:%S")| eval timebackUTC=strftime(time_ephoc,"%Y-%m-%d %H:%M:%S UTC")

0 Karma
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...