
reltime
Description
Creates a relative time field, called 'reltime', and sets this field to a human readable value of the difference between 'now' and '_time'. Human-readable values look like "5 days ago", "1 minute ago", "2 years ago", and so on.
Syntax
reltime
Usage
The reltime
command is a distributable streaming command. See Command types.
Examples
Example 1:
Adds a field called reltime
to the events returned from the search.
... | reltime
See also
PREVIOUS relevancy |
NEXT rename |
This documentation applies to the following versions of Splunk Cloud™: 7.0.13, 7.2.4, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 8.0.2006, 8.0.2007, 8.1.2008, 8.1.2009, 8.1.2011, 8.1.2012, 8.1.2101
Feedback submitted, thanks!