Not sure if this got solved, but I was able to get it formatted using the following: | inputlookup sc_vuln_data_lookup | eval first_found = strftime(first_found, "%c") | eval last_found = strfrtime(last_found, "%c") ... View more