- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
10-18-2024 09:43 AM
I have tried to create a new field with an existing string field (createdDate), which is already in an ISO 8601 format. unable to parse it
sample value of feild createdDate=2019-08-29T10:10:26.608Z
Here below the query I have used
| alter filedate = parse_timestamp("%Y-%m-%dT%H:%M:%S.%fZ", createdDate)
Can anybody help me to sort this out?
10-21-2024 08:36 AM
Duplicated post, answering here: https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/unable-to-parse-the-time-stamp/td-p/6069...
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!