<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to change week to time format? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-change-week-to-time-format/m-p/630103#M108022</link>
    <description>&lt;P&gt;hello everyone,&lt;/P&gt;
&lt;P&gt;I have a column which contains week1 , week2 ,week3,week4,week5 and I want an input to the chart to show me the data from week1 to week3 for example or week2 to week5 how could I do that?&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Wed, 08 Feb 2023 17:19:39 GMT</pubDate>
    <dc:creator>hagar71</dc:creator>
    <dc:date>2023-02-08T17:19:39Z</dc:date>
    <item>
      <title>How to change week to time format?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-change-week-to-time-format/m-p/630103#M108022</link>
      <description>&lt;P&gt;hello everyone,&lt;/P&gt;
&lt;P&gt;I have a column which contains week1 , week2 ,week3,week4,week5 and I want an input to the chart to show me the data from week1 to week3 for example or week2 to week5 how could I do that?&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 08 Feb 2023 17:19:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-change-week-to-time-format/m-p/630103#M108022</guid>
      <dc:creator>hagar71</dc:creator>
      <dc:date>2023-02-08T17:19:39Z</dc:date>
    </item>
    <item>
      <title>Re: How to change week to time format?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-change-week-to-time-format/m-p/630198#M108031</link>
      <description>&lt;P&gt;If you want a filter to only show weekX to weekY in your chart, you can use one or two text input boxes do define start/end week numbers. Let's assume you have 2 inputs, with the tokens tok_week_start and tok_week_end, then in your search you can finish the search with something like this&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;... your chart building search ...
| rex field=week_column "week(?&amp;lt;week_no&amp;gt;\s+)"
| where week_no&amp;gt;=$tok_week_start$ AND week_no&amp;lt;=$tok_week_end$
| fields - week_no&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 08 Feb 2023 23:27:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-change-week-to-time-format/m-p/630198#M108031</guid>
      <dc:creator>bowesmana</dc:creator>
      <dc:date>2023-02-08T23:27:24Z</dc:date>
    </item>
    <item>
      <title>Re: How to change week to time format?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-change-week-to-time-format/m-p/630199#M108032</link>
      <description>&lt;P&gt;You can of course do this with a time picker input, but that will not be a week based approach.&lt;/P&gt;&lt;P&gt;I assume you were talking about a dashboard and my comments were related to the classic dashboard use of tokens.&lt;/P&gt;</description>
      <pubDate>Wed, 08 Feb 2023 23:28:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-change-week-to-time-format/m-p/630199#M108032</guid>
      <dc:creator>bowesmana</dc:creator>
      <dc:date>2023-02-08T23:28:53Z</dc:date>
    </item>
    <item>
      <title>Re: How to change week to time format?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-change-week-to-time-format/m-p/630246#M108036</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/6367"&gt;@bowesmana&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I tried&amp;nbsp;&lt;/P&gt;&lt;P&gt;| rex field=Date "week(?&amp;lt;week_no&amp;gt;\s+)"&lt;BR /&gt;| where week_no&amp;gt;="week1" AND week_no&amp;lt;="week5"&lt;BR /&gt;| fields - week_no&lt;/P&gt;&lt;P&gt;but No results found the column of the weeks called Date&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 09 Feb 2023 09:11:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-change-week-to-time-format/m-p/630246#M108036</guid>
      <dc:creator>hagar71</dc:creator>
      <dc:date>2023-02-09T09:11:33Z</dc:date>
    </item>
    <item>
      <title>Re: How to change week to time format?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-change-week-to-time-format/m-p/630374#M108051</link>
      <description>&lt;P&gt;Should be&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| rex field=Date "week\s?(?&amp;lt;week_no&amp;gt;\d+)"
| where week_no&amp;gt;=1 AND week_no&amp;lt;=5
| fields - week_no&lt;/LI-CODE&gt;&lt;P&gt;regex was wrong in my first example.&lt;/P&gt;</description>
      <pubDate>Fri, 10 Feb 2023 00:33:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-change-week-to-time-format/m-p/630374#M108051</guid>
      <dc:creator>bowesmana</dc:creator>
      <dc:date>2023-02-10T00:33:23Z</dc:date>
    </item>
  </channel>
</rss>

