IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Question about time zone of datetime fields

    Posted Thu June 04, 2020 06:39 PM
    Hi,

    After I use java REST API to create an incident on IBM Resilient, the response json contains these datetime fields:
    "create_date": 1589602027349,
     ...
    "inc_last_modified_date": 1589602027349,​


    Can I ask if the long number in these datetime fields are in UTC timezone or the server's local timezone? 
    If it is in server's timezone, is there a way to find out what timezone the server has? Is this a field in the response json of the created incident? 

    Thanks!

    ------------------------------
    Mei Thom
    ------------------------------


  • 2.  RE: Question about time zone of datetime fields
    Best Answer

    Posted Thu June 04, 2020 10:40 PM
    Edited by Mei Thom Thu June 04, 2020 10:51 PM
    Hi @Mei Thom,

    I'm not positive, but I believe it's returned in UTC time. This long number format is called epoch time, which is literally the number of seconds that have elapsed since 0:00:00 January 1, 1970 UTC.

    You can check easily by simply converting a test using a website like: https://www.epochconverter.com/


    ------------------------------
    Jared Fagel
    Cyber Security Analyst I
    Public Utility
    ------------------------------