<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Drop Down based on its filename in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Drop-Down-based-on-its-filename/m-p/574864#M101591</link>
    <description>&lt;P&gt;I have a filename like this&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;-11112021_MOS.csv&lt;/P&gt;&lt;P&gt;-12112021_MOS.csv&lt;/P&gt;&lt;P&gt;-13112021_MOS.csv&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I want to create drop down based on the date. How can I do that?&lt;/P&gt;</description>
    <pubDate>Mon, 15 Nov 2021 02:01:18 GMT</pubDate>
    <dc:creator>Azwaliyana</dc:creator>
    <dc:date>2021-11-15T02:01:18Z</dc:date>
    <item>
      <title>Drop Down based on its filename</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Drop-Down-based-on-its-filename/m-p/574864#M101591</link>
      <description>&lt;P&gt;I have a filename like this&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;-11112021_MOS.csv&lt;/P&gt;&lt;P&gt;-12112021_MOS.csv&lt;/P&gt;&lt;P&gt;-13112021_MOS.csv&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I want to create drop down based on the date. How can I do that?&lt;/P&gt;</description>
      <pubDate>Mon, 15 Nov 2021 02:01:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Drop-Down-based-on-its-filename/m-p/574864#M101591</guid>
      <dc:creator>Azwaliyana</dc:creator>
      <dc:date>2021-11-15T02:01:18Z</dc:date>
    </item>
    <item>
      <title>Re: Drop Down based on its filename</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Drop-Down-based-on-its-filename/m-p/574871#M101593</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/240128"&gt;@Azwaliyana&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;As per my understanding, you need to filter dropdown values (files) on the basis of the date defined in the file name on. change of &amp;nbsp;timerange. then try below search in your dropdown.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;YOUR_SEARCH
| eval file_date= strptime(Filename,"%d%m%Y_MOS.csv") 
| addinfo 
| where file_date&amp;gt;=info_min_time and file_date&amp;lt;info_max_time&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;My Sample Search :&lt;/STRONG&gt;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| makeresults 
| eval _raw="Filename
11112021_MOS.csv
12112021_MOS.csv
13112021_MOS.csv" 
| multikv forceheader=1 
| table Filename 
| rename comment as "Upto now is for sample data only" 
| eval file_date= strptime(Filename,"%d%m%Y_MOS.csv") 
| addinfo 
| where file_date&amp;gt;=info_min_time and file_date&amp;lt;info_max_time&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;You have have different use case then please share more details on it.&lt;/P&gt;&lt;P&gt;Thanks&lt;BR /&gt;KV&lt;BR /&gt;▄︻̷̿┻̿═━一 &amp;nbsp; &lt;span class="lia-unicode-emoji" title=":winking_face:"&gt;😉&lt;/span&gt;&lt;BR /&gt;&lt;BR /&gt;If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.&lt;/P&gt;</description>
      <pubDate>Mon, 15 Nov 2021 04:54:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Drop-Down-based-on-its-filename/m-p/574871#M101593</guid>
      <dc:creator>kamlesh_vaghela</dc:creator>
      <dc:date>2021-11-15T04:54:29Z</dc:date>
    </item>
  </channel>
</rss>

