help on epoch time format number

[jip31]

hi

I would like to transform the epoch time number below in a standard format date

1546284113.000000

could you please help me?

[sdchakraborty · Accepted solution]

Hi,

Is this what you looking for?

|  makeresults 
| eval date = 1546284113.000000
| eval formatted_date = strftime(date,"%d-%m-%Y %H:%M:%S")

for more formatting options please have a look at the below link,

https://docs.splunk.com/Documentation/Splunk/7.2.3/SearchReference/Commontimeformatvariables

Sid