Exam CCFH-202 All QuestionsBrowse all questions from this exam
Go to Exam
Question 15

SPL (Splunk) eval statements can be used to convert Unix times (Epoch) into UTC readable time. Which eval function is correct?

    Correct Answer: C

    The correct eval function to convert Unix times (Epoch) into UTC readable time in Splunk (SPL) is 'strftime'. The 'strftime' function formats Unix epoch time into a human-readable string. The other options 'now', 'typeof', and 'relative_time' are not used for this purpose.

Discussion
alanalanalanOption: C

C. strftime

kangaruOption: C

| eval starttime=strftime(StartTimestamp,"%Y-%m-%dT%H:%M:%S.%Q")