CCFH-202B · Question #5
SPL (Splunk) eval statements can be used to convert Unix times (Epoch) into UTC readable time. Which eval function is correct?
The correct answer is C. strftime. The strftime eval function is used to convert Unix times (Epoch) into UTC readable time. It takes two arguments: a Unix time field and a format string that specifies how to display the time. The now, typeof, and relative_time eval functions are not used to convert Unix times…
Question
SPL (Splunk) eval statements can be used to convert Unix times (Epoch) into UTC readable time. Which eval function is correct?
Options
- Anow
- Btypeof
- Cstrftime
- Drelative time
How the community answered
(61 responses)- A7% (4)
- B3% (2)
- C89% (54)
- D2% (1)
Explanation
The strftime eval function is used to convert Unix times (Epoch) into UTC readable time. It takes two arguments: a Unix time field and a format string that specifies how to display the time. The now, typeof, and relative_time eval functions are not used to convert Unix times into UTC
Topics
Community Discussion
No community discussion yet for this question.