Stay organized with collections
Save and categorize content based on your preferences.
timestamp.now
timestamp.now()
Description
Returns the number of seconds since 1970-01-01 00:00:00 UTC. This is also
known as Unix epoch time.
Return type
INT
Code samples
Example 1
The following example returns a timestamp for code executed on
May 22, 2024 at 18:16:59.
timestamp.now() = 1716401819 // Unix epoch time in seconds for May 22, 2024 at 18:16:59
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-07-14 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-14 UTC."],[[["\u003cp\u003e\u003ccode\u003etimestamp.now()\u003c/code\u003e returns the current Unix epoch time, which is the number of seconds elapsed since January 1, 1970, at 00:00:00 UTC.\u003c/p\u003e\n"],["\u003cp\u003eThis function is supported in both Rules and Search contexts, as indicated by the provided links.\u003c/p\u003e\n"],["\u003cp\u003eThe function returns an integer (\u003ccode\u003eINT\u003c/code\u003e) representing the timestamp in seconds.\u003c/p\u003e\n"],["\u003cp\u003eAn example usage demonstrates that \u003ccode\u003etimestamp.now()\u003c/code\u003e returns \u003ccode\u003e1716401819\u003c/code\u003e for May 22, 2024, at 18:16:59.\u003c/p\u003e\n"]]],[],null,["### timestamp.now\n\nSupported in: \n[Rules](/chronicle/docs/detection/default-rules) [Search](/chronicle/docs/investigation/udm-search) \n\n timestamp.now()\n\n#### Description\n\nReturns the number of seconds since 1970-01-01 00:00:00 UTC. This is also\nknown as *Unix epoch time*.\n\n#### Return type\n\n`INT`\n\n#### Code samples\n\n##### Example 1\n\nThe following example returns a timestamp for code executed on\nMay 22, 2024 at 18:16:59. \n\n timestamp.now() = 1716401819 // Unix epoch time in seconds for May 22, 2024 at 18:16:59"]]
