HI
Can someone please let me know how to convert the time from the format hh:mm:ss.6Q to hh:mm:ss ??
Use the strptime and strftime functions to convert time formats.
| eval timeField=strftime(strptime(timeField,"%H:%M:%S.%6Q"), "%H:%M:%S")
You also can use string manipulation to cut off the last 7 characters.