<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Want to replace column name with today's date in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Want-to-replace-column-name-with-today-s-date/m-p/667060#M111897</link>
    <description>&lt;P&gt;Sure!&amp;nbsp; Just use the concatenation operator (&lt;FONT face="courier new,courier"&gt;.&lt;/FONT&gt;) in the &lt;FONT face="courier new,courier"&gt;eval&lt;/FONT&gt; command.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| eval today=strftime(now(), "%m/%d/%Y") . "_Response"&lt;/LI-CODE&gt;</description>
    <pubDate>Wed, 01 Nov 2023 20:57:46 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2023-11-01T20:57:46Z</dc:date>
    <item>
      <title>Want to replace column name with today's date</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Want-to-replace-column-name-with-today-s-date/m-p/667051#M111894</link>
      <description>&lt;P&gt;I have a query to display following 3 fields&amp;nbsp;&lt;/P&gt;&lt;P&gt;| table pp_user_action_name,Today_Calls,Avg_today&lt;/P&gt;&lt;P&gt;i want to replace 'Avg_today' column header with today's date like '11/1/2023'&amp;nbsp;&lt;/P&gt;&lt;P&gt;is it possible?&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 01 Nov 2023 18:51:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Want-to-replace-column-name-with-today-s-date/m-p/667051#M111894</guid>
      <dc:creator>sabari80</dc:creator>
      <dc:date>2023-11-01T18:51:19Z</dc:date>
    </item>
    <item>
      <title>Re: Want to replace column name with today's date</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Want-to-replace-column-name-with-today-s-date/m-p/667056#M111895</link>
      <description>&lt;P&gt;Here's one method.&amp;nbsp; There may be others.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| makeresults 
| eval pp_user_action_name="foo",Today_Calls=42,Avg_today=3 
| table pp_user_action_name,Today_Calls,Avg_today
| rename Avg_today as 
    [| makeresults 
    ``` Get today's date and format it ```
    | eval today=strftime(now(), "%m/%d/%Y") 
    ``` Return only the value of the today field ```
    | return $today]&lt;/LI-CODE&gt;</description>
      <pubDate>Wed, 01 Nov 2023 20:28:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Want-to-replace-column-name-with-today-s-date/m-p/667056#M111895</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2023-11-01T20:28:43Z</dc:date>
    </item>
    <item>
      <title>Re: Want to replace column name with today's date</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Want-to-replace-column-name-with-today-s-date/m-p/667059#M111896</link>
      <description>&lt;P&gt;its working. can we append any string with this date? For Ex: 11/1/2023_Response&lt;/P&gt;</description>
      <pubDate>Wed, 01 Nov 2023 20:49:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Want-to-replace-column-name-with-today-s-date/m-p/667059#M111896</guid>
      <dc:creator>sabari80</dc:creator>
      <dc:date>2023-11-01T20:49:22Z</dc:date>
    </item>
    <item>
      <title>Re: Want to replace column name with today's date</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Want-to-replace-column-name-with-today-s-date/m-p/667060#M111897</link>
      <description>&lt;P&gt;Sure!&amp;nbsp; Just use the concatenation operator (&lt;FONT face="courier new,courier"&gt;.&lt;/FONT&gt;) in the &lt;FONT face="courier new,courier"&gt;eval&lt;/FONT&gt; command.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| eval today=strftime(now(), "%m/%d/%Y") . "_Response"&lt;/LI-CODE&gt;</description>
      <pubDate>Wed, 01 Nov 2023 20:57:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Want-to-replace-column-name-with-today-s-date/m-p/667060#M111897</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2023-11-01T20:57:46Z</dc:date>
    </item>
    <item>
      <title>Re: Want to replace column name with today's date</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Want-to-replace-column-name-with-today-s-date/m-p/667063#M111898</link>
      <description>&lt;P&gt;Thanks. i am all set.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 01 Nov 2023 21:32:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Want-to-replace-column-name-with-today-s-date/m-p/667063#M111898</guid>
      <dc:creator>sabari80</dc:creator>
      <dc:date>2023-11-01T21:32:51Z</dc:date>
    </item>
  </channel>
</rss>

