packetchef/splunk_indextime.spl

Created March 27, 2020 13:43

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/packetchef/fef6959bb67232204c844a0c140ed646.js"></script>
Save packetchef/fef6959bb67232204c844a0c140ed646 to your computer and use it in GitHub Desktop.

Download ZIP

Raw

splunk_indextime.spl

	index=logs1
	\| eval indextime=strftime(_indextime,"%Y-%m-%d %H:%M:%S")
	\| table _time indextime

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment