arguments:
  - field
definition: 'convert timeformat="%m/%d/%Y %H:%M:%S" ctime($field$)'
description: convert epoch time to string
name: security_content_ctime