topic Re: how can i extract date only from date field? in Dashboards & Visualizations

how can i extract date only from date field?

avneet26 — Fri, 04 Dec 2020 12:08:55 GMT

hi , the format of the field is "errorOccuredOn":"2020-12-04+01:00" and i want to extract only the date i.e. only 2020-12-04 should be coming into the result. Let me know how this can be achieved.

Re: how can i extract date only from date field?

493669 — Fri, 04 Dec 2020 12:24:44 GMT

@avneet26 you can use substr command-

|eval errorOccuredOn=substr(errorOccuredOn,1,10)

Re: how can i extract date only from date field?

gcusello — Fri, 04 Dec 2020 12:25:54 GMT

Hi @avneet26,

if you already have the field errorOccuredOn and you need only to extract the date, you can use this regex:

| rex field=errorOccuredOn "^(?<errorOccuredOn>\d+-\d+-\d+)"

If instead you have to extract the field from the raw data, you can use the following regex

| rex "\"errorOccuredOn\":\"(?<errorOccuredOn>\d+-\d+-\d+)"

that you can test at https://regex101.com/r/CRiDtQ/1

Sorry, but did you open a new question instead continue the old one?

Ciao.

Giuseppe

Re: how can i extract date only from date field?

avneet26 — Wed, 09 Dec 2020 05:17:04 GMT

thanks it worked!