Hi~ joy76~
First, a specific time-formatted filed is converted by mktime().
And then, use fieldformat command
example
field: Rebooting_Time
value: 2010-02-08 09:20:01
type: string
search
| convert timeformat="%Y-%m-%d %T" mktime(Rebooting_Time)
| fieldformat Rebooting_Time=strftime(Rebooting_Time,"%Y-%m-%d %T")
| Table Rebooting_Time
As a Result, values of Rebooting_Time is not only displayed for human readable time, but also it was sorted by time.
... View more