I am trying to configure the Auto Timestamp function to extract a time field
Options
![Franky Laarits](https://s.gravatar.com/avatar/f76d108facd34b9ec147aa5d164deee6?s=480&r=pg&d=https%3A%2F%2Fcdn.auth0.com%2Favatars%2Ffl.png)
Franky Laarits
Posts: 59 ✭✭
hi all, I am trying to configure the Auto Timestamp function to extract a time field that can be all over the place within the event. The timestamp itself is in epoch format (start=<time>). I setup an additional timestamp within the function, but I'm not sure what to specify for a strptime format, since it's epoch.
0
Answers
-
%s
0 -
just for reference, those linke are quite handy. https://docs.cribl.io/stream/cribl-reference/#time https://github.com/d3/d3-time-format#api-reference
0