MS Date to Instant Transformer

Transforms an MS Date to an Instant.

The Microsoft (MS) date format represents dates as the number of 100-nanosecond intervals (also known as ticks) that have elapsed since January 1, 1601, UTC. This date is known as the MS epoch and is used extensively in Windows systems, including file times and Active Directory attributes like accountExpires.

Configuration

Valve name: MsDateToInstantTransformer

Properties

Name	Description	Default value	Mandatory	Expanded
src	Property containing the source MS Date	N/A
dest	Property containing the created Instant.	N/A
dest_pattern	Instant pattern. ISO-8601 format	"yyyy-MM-ddTHH:mm:ss.ffffffZ"
dest_tz	Instant time zone.	"UTC"
remove_existing_dest	Flag to remove any value pre-existing in destination-property. To avoid creating a multi-value property.	false

Example

{
    "name": "MsDateToInstantTransformer",
    "config": {
        "src": "ms_date",
        "dest": "instant",
        "dest_pattern": "yyyy-MM-dd HH:mm:ss",
        "dest_tz": "UTC"
    }
}

Special handling of “Never Expires”

If the src value is 0 or 9223372036854775807 (0x7FFFFFFFFFFFFFFF), the valve interprets this as an account that never expires. In this case, the output at dest will be set to "never"