https://community.splunk.com/t5/Splunk-Dev/issue-with-dropdown-containing-month-and-year-value/m-p/355797#M5699 <P>Thanks a lot.. It worked!! </P> Wed, 15 Mar 2017 10:56:55 GMT k_harini 2017-03-15T10:56:55Z https://community.splunk.com/t5/Splunk-Dev/issue-with-dropdown-containing-month-and-year-value/m-p/355795#M5697 <P>I have to produce Jan-2017 Feb-2017 in the dropdown<BR /> search query |eval datetime = strftime(strptime(mydate,"%m/%d/%Y"),"%b-%Y")|dedup datetime|table datetime|sort - datetime</P> <P>I get Feb and Jan which is sorted by alphabetical order. How to sort with month order. please help. Thanks!</P> Wed, 15 Mar 2017 08:41:11 GMT https://community.splunk.com/t5/Splunk-Dev/issue-with-dropdown-containing-month-and-year-value/m-p/355795#M5697 k_harini 2017-03-15T08:41:11Z https://community.splunk.com/t5/Splunk-Dev/issue-with-dropdown-containing-month-and-year-value/m-p/355796#M5698 <P>You probably have to use the numerical format for the month to sort, and then add the text version afterward. Try this.</P> <PRE><CODE>&lt;search query&gt; | eval datetime_num = strftime(strptime(mydate,"%m/%d/%Y"),"%m-%Y") | dedup datetime_num | table mydate datetime_num | sort - datetime_num | eval datetime = strftime(strptime(mydate,"%m/%d/%Y"),"%b-%Y") | fields datetime </CODE></PRE> Wed, 15 Mar 2017 10:18:20 GMT https://community.splunk.com/t5/Splunk-Dev/issue-with-dropdown-containing-month-and-year-value/m-p/355796#M5698 rjthibod 2017-03-15T10:18:20Z https://community.splunk.com/t5/Splunk-Dev/issue-with-dropdown-containing-month-and-year-value/m-p/355797#M5699 <P>Thanks a lot.. It worked!! </P> Wed, 15 Mar 2017 10:56:55 GMT https://community.splunk.com/t5/Splunk-Dev/issue-with-dropdown-containing-month-and-year-value/m-p/355797#M5699 k_harini 2017-03-15T10:56:55Z