I'm running the below query to find out when was the last time an index checked in. However, in using this query the output reflects a time format that is in EPOC format. I'd like to convert it t...
I have an event field called `LastBootUpTime=20120119121719.125000-360'
I am trying to convert this to a more readable format by using this convert command
| convert timeformat="%m-%d-%Y %H:%M...
Hi, I had a good base search for a calculation and alerting when an upload/download happens, but now I tried to tidy it up and convert bytes to KB and show a percentage as a "10%" instead of j...
Hi, I need to convert the specific number from 0 to 23 to 00:00:00 format. I used the following in my statement by I am getting a blank on my eventHour field. eval HOUR=(if (isnull(H...
I am trying to convert the string "08/04/16 09:40:41.690" to a date in splunk. I think that I am supposed to use some combination of strptime and strftime but I can't figure it you. I thought that e...
Currently I have a field holding a Julian date. I am trying to convert it using strftime but i'm having issues. Date = 2022.091 Current query: index = * | eval Convert...