Splunk Search
Highlighted

How to round down time to nearest 10th minute

New Member

Hi,
I want to convert my now() time to round down to nearest 10th minute.

For e.g.
If now returns 10:02 I want it to be converted to 10:00, if its, 10:18 then 10:10.

How can we achieve that?

0 Karma
Highlighted

Re: How to round down time to nearest 10th minute

SplunkTrust
SplunkTrust

@sammyshinde14 ,

Try

|eval time=(floor(now()/600))*600
Highlighted

Re: How to round down time to nearest 10th minute

Champion
| eval time=strftime((floor(now()/600))*600,"%Y-%m-%d %H:%M:%S")

Just adding on to @renjith.nair 's cddoe for minor time format issues

Highlighted

Re: How to round down time to nearest 10th minute

Champion

hi @sammyshinde14

If the solutions above worked out, please accept the answer , otherwise let us know what is the remaining issue

0 Karma