Hello
I have a lookup table which has a Datetime field like 1/20/2013 or 4/29/2013. Now I need to convert it to epoch time to compare it to the normal time when the search ran. We can take the H:M:S as 00:00:00.
Any idea on what can be done?
Thanks
Hi Theouhuios,
What you will need to do is specify in the lookup definition (in transforms.conf) that one of the fields is in fact a time value. There shouldn't be any need to convert it to epoch seconds.
Example:
[eventLookup]
filename = events.csv
time_field = Datetime
time_format = %m/%d/%Y
Without the hours, minutes, and seconds being defined it should default to 00:00:00.
Hope this helps 🙂