topic Re: How to convert date format? in Getting Data In

How to convert date format?

dhiraj — Fri, 08 Sep 2023 11:14:21 GMT

Hi ,

In splunk query I need to convert date format as below .

Current format - 07/09/23

Required Format : 2023-09-07

Re: How to convert date format?

gcusello — Fri, 08 Sep 2023 12:19:23 GMT

Hi @dhiraj ,

you have to use the eval command with the strftime and strptime options, like this:

| eval new_date=strftime(strptime(date,"%d/0m/%y"),"%Y-%m-%d")

Ciao.

Giuseppe

Re: How to convert date format?

richgalloway — Fri, 08 Sep 2023 12:21:45 GMT

Use the strptime function to convert the current format into epoch form then use strftime to convert that into the required format. The two functions can be used in a single eval.

| eval timefield=strftime(strptime(timefield, "%d/%m/%y"), "%Y-%m-%d")