I'm having difficulties converting Microsoft's LastBootUpTime into Epoch taking the timezone offset into account to get an Epoch in GMT value for comparison. Would anyone have any ideas to assist?
LastBootUpTime="20170522110049.412726-240"
Thanks,
Paul
Give this a try (runanywhere search for testing, just use the last line for conversion expression)
| gentimes start=-1 | eval LastBootUpTime="20170522110049.412726-240"
| eval _time=strptime(LastBootUpTime,"%Y%m%d%H%M%S.%N%Z")