CCFH-202 Exam QuestionsBrowse all questions from this exam

CCFH-202 Exam - Question 15


SPL (Splunk) eval statements can be used to convert Unix times (Epoch) into UTC readable time. Which eval function is correct?

Show Answer
Correct Answer: C

The correct eval function to convert Unix times (Epoch) into UTC readable time in Splunk (SPL) is 'strftime'. The 'strftime' function formats Unix epoch time into a human-readable string. The other options 'now', 'typeof', and 'relative_time' are not used for this purpose.

Discussion

2 comments
Sign in to comment
kangaruOption: C
Jan 14, 2024

| eval starttime=strftime(StartTimestamp,"%Y-%m-%dT%H:%M:%S.%Q")

alanalanalanOption: C
Jul 12, 2024

C. strftime