Hi
I have a timestamp field with values as below
"2016-08-25T13:30:36.82"
"2016-08-25T13:13:38.737"
"2016-08-25T11:05:32.76"
How i can convert this into the epoch time so that i can use the value to compare with other epoch value.
Your help will be greatly appreaciated.
Try this
... | eval t=strptime(timestamp. "%Y-%m-%dT%H:%M:%S")
I had a discussion with Sundaresh, and i tried below thing and it works as expected.
..|eval t=strptime(timestamp, "\"%Y-%m-%dT%H:%M:%S")|..
Thank You.