SPL (Splunk) eval statements can be used to convert Unix times (Epoch) into UTC readable time Which eval function is correct^

SPL (Splunk) eval statements can be used to convert Unix times (Epoch) into UTC readable time Which eval function is correct^
A . now
B. typeof
C. strftime
D. relative time

View Answer

Answer: C

Explanation:

The strftime eval function is used to convert Unix times (Epoch) into UTC readable time. It takes two arguments: a Unix time field and a format string that specifies how to display the time. The now, typeof, and relative_time eval functions are not used to convert Unix times into UTC readable time.

Reference: https://docs.splunk.com/Documentation/Splunk/8.2.3/SearchReference/CommonEvalFunctions