CCFH-202B: CrowdStrike Certified Falcon Hunter

By CrowdStrike · Question Mode

QuestionQ40

VerifiedSearch and Investigation Tools

Which partial CQL query converts Unix timestamps from a web server log into a human-readable format?

Explanation

The formatTime() function formats a Unix-epoch timestamp from the specified field into a string using the supplied date/time pattern. Assigning its result to connectTime with field=requestTime, locale=en_US, and timezone=Z produces a UTC human-readable value.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!