Splunk Search

Convert epochtime to minutes

New Member

Hi I need to Convert an #epoch time to #minutes any ideas please guys would be really grateful - Thanks

0 Karma
1 Solution

Legend

Hi @nwoolley,
to convert epochtime you can use the eval command with strftime function ( for more infos see at https://docs.splunk.com/Documentation/Splunk/8.0.0/SearchReference/DateandTimeFunctions ).
In few words:

your_search
| eval my_new_time=strftime(epochtime,"%M")

If you want other time formats see at https://docs.splunk.com/Documentation/SplunkCloud/8.0.0/SearchReference/Commontimeformatvariables

Ciao.
Giuseppe

View solution in original post

0 Karma

Legend

Hi @nwoolley,
to convert epochtime you can use the eval command with strftime function ( for more infos see at https://docs.splunk.com/Documentation/Splunk/8.0.0/SearchReference/DateandTimeFunctions ).
In few words:

your_search
| eval my_new_time=strftime(epochtime,"%M")

If you want other time formats see at https://docs.splunk.com/Documentation/SplunkCloud/8.0.0/SearchReference/Commontimeformatvariables

Ciao.
Giuseppe

View solution in original post

0 Karma

New Member

Perfect Grazie !

0 Karma