Hi,
I have a field named "statusChanged" as shown below. I need to convert this (GMT) to EST . please help on the same.
statusChanged: 2018-10-17T15:29:32.000Z
eval EST_Time=strftime(strptime(statusChanged,"%Y-%m-%dT%H:%M:%S.%3N%Z"),"%Y-%m-%d %H:%M:%S")
There are no direct function available to do so , but you can try workarounds provided in this post: https://answers.splunk.com/answers/241917/timezone-conversion-function.html
@somesoni2 The below worked .
eval EST_Time=strftime(strptime(statusChanged,"%Y-%m-%dT%H:%M:%S.%3N%Z"),"%Y-%m-%d %H:%M:%S")