hi all,I am trying to configure the Auto Timestamp function to extract a time field that can be all over the place within the event. The timestamp itself is in epoch format (start=<time>). I setup an additional timestamp within the function, but I'm not sure what to specify for a strptime format, since it's epoch.
Question
I am trying to configure the Auto Timestamp function to extract a time field
%s
just for reference, those linke are quite handy.https://docs.cribl.io/stream/cribl-reference/#timehttps://github.com/d3/d3-time-format#api-reference
Sign up
Already have an account? Login
Login to the community
No account yet? Create an account
Using your Cribl Curious or University Account
User Login Employee loginEnter your E-mail address. We'll send you an e-mail with instructions to reset your password.