Float timestamp

[predator89090]

Question

Hi,
I'm trying to process logs from zeek where the timestamp comes in float format.
A timestamp represents an absolute point in time. The frame of reference for a timestamp is the UNIX epoch, January 1, 1970. That is, a timestamp is simply an anchored timespan. The function now() returns the current wallclock time as a timestamp.

An example
"ts": 1607568264.274569

How can I convert it to timestamp format?
According to the documentation, I either need to convert it to an int and use "from_unix_timestamp", or parse it as milliseconds and nanoseconds and use "to_unix_timestamp".
But will the precision be preserved with this approach?

Or is there a method to convert to timestamp from float

Vector Config

No response

Vector Logs

No response

[thomasqueirozb]

Since from_unix_timestamp takes in an integer you'll want to multiply, cast to int and then pass it into from_unix_timestamp. This playground link should provide you a working solution.