×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
rhilderbrand1
Observer
Member since: ‎12-06-2021
‎12-09-2021
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎12-06-2021
Activity Feed
View All

Re: Timezone offset causing blanks during conversi...

by in Splunk Search
‎12-09-2021 06:18 AM
‎12-09-2021 06:18 AM
Not sure. Everything was fine during daylight savings time but on November 8, half of the devices started reporting their UTC time offsets in what I assume are minutes rather than hours and minutes. The messed up time offsets are all multiples of 60, for example -0480 or -0360. I suspect the use of %z is strictly with hour and minute formats so anything greater than 59 in the last two digits may throw it off. I guess I'll have to read up on rex or regex to pull the needed info out instead.  ... View more

Timezone offset causing blanks during conversion

by in Splunk Search
‎12-06-2021 12:14 PM
‎12-06-2021 12:14 PM
I have a date column that I'm trying to convert to %m/%d/%Y. The date stamp is a little complex but I got it to work until daylight savings took affect. Now anything with a timezone offset that has a non-zero number in the third digit, -0480 for example, returns blank. Below is my query... | inputlookup DateStampConvert.csv | rename "System Name" as systemName | rename "Date Stamp" as DateStampDate | eval dateStamp=strftime(strptime(DateStampDate, "%b %d %Y %H:%M:%S %z"), "%m/%d/%Y") | table systemName dateStamp | outputlookup dateStamp.csv Is there something I'm missing? ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎12-09-2021 09:39 AM