Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

unable to eval correct epoch time

$
0
0
host=*****| eval Time="17:00:00"|eval Time2="13:00:00" |eval Time=strptime(Time,"%H:%M:%S") |eval Time2=strptime(Time2,"%H:%M:%S") | table Time Time2 is giving the epoch time as Time :1503327600.000000 Time2 :1503399600.000000 when I do a comparison of Time>Time2 is returning wrong result since the epoch is Time2 is greater. Please help.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>