About cyberpop

cyberpop · ‎09-24-2025

I replace %Z with %HKT as suggested. I use |fieldformat "Date Time"=strftime('DateTime',%F %T %HKT"), it display 2025-09-24 01:31:23 EDT 1KT, I think it take hour (%H) instead of %HKT. I want to get HKT time by using SPL query. kindly help

cyberpop · ‎09-23-2025

The %HKT didn't work, I use |fieldformat "Date Time"=strftime('DateTime',%F %T %:z %Z %HKT"), it display 2025-09-24 01:31:23 EDT 1KT, I think it is wrong

cyberpop · ‎09-23-2025

so how to convert to Hong Kong timezone?

cyberpop · ‎09-23-2025

I use fieldformat "Date Time"=strftime('Date Time',"%F %T %:z %Z","Asia/Hong Kong"). but it said the syntax is wrong. how to resolve it, thanks

cyberpop · ‎08-17-2020

also for my saved search, if i go to report, choose open in search window, the search will get executed, is there any way, we can view the spl command of the search without executing the search?

cyberpop · ‎08-16-2020

in ES content management, if i click the subsearch, it will bring me to the edit page. but when i click search or view, it display the blank page, where can we find the detail of the search and view? in ES, can we go to search/search menu and run the subsearch or subsearch has to be runned in content managment as scheduled job? thanks

cyberpop · ‎08-16-2020

I have a index， I want to know all display fields list and field description for this index without running the search, where in splunk enterprise security, can we find this info?

Posts	7
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎08-16-2020

Online Status	Offline
Date Last Visited	‎09-24-2025 06:42 PM

splunk query to a different timezone fail

subsearch and search

index field list

Re: splunk query to a different timezone fail

Re: splunk query to a different timezone fail

Re: splunk query to a different timezone fail

splunk query to a different timezone fail

Re: subsearch and search

subsearch and search

index field list

Join the Conversation