Skip to main content
Panther Knowledge Base

Does Panther support the %-S code from the strftime format for a custom Microsoft schema?

  1. Last updated
  2. Save as PDF

QUESTION

Does Panther support the %-S code from the strftime format for non zero-padded values for the seconds? We have tried to use %Y-%m-%dT%H:%M:%-S.%f%z to parse the date 2022-11-30T12:1:3.8596957000Z, but it doesn't work.

ANSWER

Panther does not support %-S for timestamps, but you can try using %Y-%m-%dT%H:%M:%S.%f%fZ to parse the dates. The only caveat with this approach is that the parsed result will have the wrong subsecond precision.