index=pltwg_shopflex
| eval Time=typeof(event.InventoryEventCarpet.InventoryEventCreateDateTime)
"http://cimsplunk/en-US/app/Plant_WG/ols_production_report_clone/edit"
Typeof for "event.InventoryEventCarpet.InventoryEventCreateDateTime" returns "invalid" as the format.
This is the field "event.InventoryEventCarpet.InventoryEventCreateDateTime =2018-06-07T15:44:03.570".
I want to convert this to a date, then to a week ending field and need help.
does it work if you put single quotes around the field?
| eval Time=typeof('event.InventoryEventCarpet.InventoryEventCreateDateTime')
Yes, it comes back as a string. Thanks for helping, have a great week end!