I'm currently creating a dashboard and need to put the time of an event into a readable format as I currently see a number such as: 1571187604872
The search I am running is:
index=BLAH Field1="BLAHBLAH"
|eval Time=strftime(Field2, "%Y/%m/%d %H:%M")
|table Time Field3 Field4 Field5 Field6
This search doesn't gives me a readable time but the time isn't correct as the date are all the same with the year being 9999. Can somebody give me some guidance on how to correct this please?
↧