Try this
sourcetype=test | eval c_time=strftime(log_time,"%m/%d/%y %H:%M:%S") | table _time, c_time
the function strftime(X,Y) takes an epochtime value, X, as the first argument and renders it as a string using the format specified by Y.
Hi,
I'm looking for the answer for the question you posted,
Do you find any answer for this?
I'm trying to convert 1407361408100 to some human readable format.
I've tried to used convert function but not getting the correct result
sourcetype=test | convert timeformat=" %m/%d/%y %H:%M:%S" ctime(log_time) AS c_time | table _time, c_time
Where are you trying to convert this?