topic Re: Extracting the date from a filename without modifying the datetime.xml in Knowledge Management

Extracting the date from a filename without modifying the datetime.xml

mahbs — Tue, 29 Sep 2020 17:07:48 GMT

Hi,

I'm trying to extract the date from a filename without having to configure the config.file, i want to be able to achieve this through the search panel.

This is my file name: name_name_20171130.txt

This is the regular expression I've found that is the closest to helping me achieve what I need:

source="name_name_20171130.txt" host="xxx" |   rex field= source="(?<date>[\d/]+)\s\w+" |table _raw 
ITEM, SOH_DIFF, field

Alternatively, this expression: (?\d{8})

Please Help!

Re: Extracting the date from a filename without modifying the datetime.xml

harsmarvania57 — Mon, 04 Dec 2017 11:56:08 GMT

Can you please try this query, it will extract date from your source file name in date field.

source="name_name_20171130.txt" host="xxx" |   rex field=source "(?:[^\_]*\_){2}(?<date>.*)\.txt" |table _raw, ITEM, SOH_DIFF, date

I hope this helps.

Thanks,
Harshil

Re: Extracting the date from a filename without modifying the datetime.xml

mahbs — Mon, 04 Dec 2017 12:02:14 GMT

Thank you!