Splunk time format conversions?

[pavanae]

How do I convert the below time format 

2023-05-02T02:35:47Z into

2023-05-03 15:37:22

[richgalloway · Accepted solution]

Use the strptime function to convert the time into epoch form then use strftime to convert the epoch into the desired result.

| eval foo = strftime(strptime(foo, "%Y-%m-%dT%H:%M:%S%Z"), "%Y-%m-%d %H:%M:%S")