Unable to parse the time stamp

[SUDHAKARVEL]

I have trying to create a new field with existing string field (cretedDate) which is already in a ISO 8601 format but. unable to parse it

sample value of feild createdDate=2019-08-29T10:10:26.608Z

here below the query i have used


| alter filedate = parse_timestamp("%Y-%m-%dT%H:%M:%S.%fZ", createdDate)


Anybody help me to sort this out

Cortex XSIAM Cortex XDR 

[jmazzeo]

Hi @SUDHAKARVEL, thanks for reaching us using the Live Community.

Please take a look at the parse_timestamp documentation here: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-XQL-Language-Reference/parse_timest...

Looks like you are missing the format_string function.

If this post answers your question, please mark it as the solution.