Hello darlas,
Was just refreshing my knowledge of the ISO 8601 timestamp format, and read your post from 5 years and 9 months ago. Don't see that anyone ever responded to your question.
"I also am trying to parse or reformat an ISO 8601 date into something more human friendly. Hope someone can help."
ISO 8610 format:
| eval newtime=strftime(_time, "%Y-%m-%dT%H:%M:%S.%3N%z")
Here is something more human readable friendly without getting to far away from the ISO standard. Like to change the year with century, %Y, to without century, %y, leave out the T separator and the time zone offset, %z, and add the milliseconds, %3N. Also, like to add the @ between the date and time strings, but that can be added of removed depending on preference, and horizontal real estate available in the report or dashboard panel. Hope this helps - if you still need help. 😎
| eval newtime=strftime(_time, "%m/%d/%y @ %H:%M:%S.%3N")
... View more