Does anyone knows how to do this? Im having a trouble with this convertion.
Thanks in advance
Like this:
... | eval now = now()
| fieldformat now = strftime(now, "%c")
Like this:
... | eval now = now()
| fieldformat now = strftime(now, "%c")
Thank you! That worked a treat
| convert ctime(now())
Assuming you want to convert now()
into text, you want strftime
.
... | eval nowText = strftime(now(), "%Y-%m-%dT%H:%M:%S%Z")