Splunk Search

Convert epochtime to minutes

nwoolley
Engager

Hi I need to Convert an #epoch time to #minutes any ideas please guys would be really grateful - Thanks

0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @nwoolley,
to convert epochtime you can use the eval command with strftime function ( for more infos see at https://docs.splunk.com/Documentation/Splunk/8.0.0/SearchReference/DateandTimeFunctions ).
In few words:

your_search
| eval my_new_time=strftime(epochtime,"%M")

If you want other time formats see at https://docs.splunk.com/Documentation/SplunkCloud/8.0.0/SearchReference/Commontimeformatvariables

Ciao.
Giuseppe

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @nwoolley,
to convert epochtime you can use the eval command with strftime function ( for more infos see at https://docs.splunk.com/Documentation/Splunk/8.0.0/SearchReference/DateandTimeFunctions ).
In few words:

your_search
| eval my_new_time=strftime(epochtime,"%M")

If you want other time formats see at https://docs.splunk.com/Documentation/SplunkCloud/8.0.0/SearchReference/Commontimeformatvariables

Ciao.
Giuseppe

0 Karma

nwoolley
Engager

Perfect Grazie !

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...