https://community.splunk.com/t5/Getting-Data-In/How-to-convert-time-format-of-20090930-to-30-Sep-2009/m-p/170916#M34523 <P>This should work:</P> <PRE><CODE>eval t=strftime(strptime(&lt;your date field&gt;, "%Y%m%d"), "%Y-%b-%d") </CODE></PRE> Wed, 22 Oct 2014 12:03:56 GMT richgalloway 2014-10-22T12:03:56Z https://community.splunk.com/t5/Getting-Data-In/How-to-convert-time-format-of-20090930-to-30-Sep-2009/m-p/170915#M34522 <P>I want to get the time in this format 2009-Sep-30 from 20090930</P> Wed, 22 Oct 2014 10:24:23 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-convert-time-format-of-20090930-to-30-Sep-2009/m-p/170915#M34522 srinathd 2014-10-22T10:24:23Z https://community.splunk.com/t5/Getting-Data-In/How-to-convert-time-format-of-20090930-to-30-Sep-2009/m-p/170916#M34523 <P>This should work:</P> <PRE><CODE>eval t=strftime(strptime(&lt;your date field&gt;, "%Y%m%d"), "%Y-%b-%d") </CODE></PRE> Wed, 22 Oct 2014 12:03:56 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-convert-time-format-of-20090930-to-30-Sep-2009/m-p/170916#M34523 richgalloway 2014-10-22T12:03:56Z