Splunk Search

How to convert time into the Epoch format

Path Finder

Hi
I have a timestamp field with values as below

"2016-08-25T13:30:36.82"
"2016-08-25T13:13:38.737"
"2016-08-25T11:05:32.76"

How i can convert this into the epoch time so that i can use the value to compare with other epoch value.

Your help will be greatly appreaciated.

0 Karma
1 Solution

Legend

Try this

... | eval t=strptime(timestamp. "%Y-%m-%dT%H:%M:%S")

View solution in original post

0 Karma

Legend

Try this

... | eval t=strptime(timestamp. "%Y-%m-%dT%H:%M:%S")

View solution in original post

0 Karma

Path Finder

I had a discussion with Sundaresh, and i tried below thing and it works as expected.

..|eval t=strptime(timestamp, "\"%Y-%m-%dT%H:%M:%S")|..

Thank You.

0 Karma