Convert epochtime to minutes

[nwoolley]

Hi I need to Convert an #epoch time to #minutes any ideas please guys would be really grateful - Thanks

[gcusello · Accepted solution]

Hi @nwoolley,
to convert epochtime you can use the eval command with strftime function ( for more infos see at https://docs.splunk.com/Documentation/Splunk/8.0.0/SearchReference/DateandTimeFunctions ).
In few words:

your_search
| eval my_new_time=strftime(epochtime,"%M")

If you want other time formats see at https://docs.splunk.com/Documentation/SplunkCloud/8.0.0/SearchReference/Commontimeformatvariables

Ciao.
Giuseppe

[nwoolley]

Perfect Grazie !