<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to extract Date from Day format in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536932#M36689</link>
    <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352"&gt;@gcusello&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I am not getting all the dates correct :&lt;/P&gt;&lt;TABLE&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD&gt;1/8/2021 3:&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;1/9/2021 3:&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;10/16/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;10/17/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;10/20/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;10/25/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;10/27/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;11/14/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;11/17/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;11/18/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;12/2/2020 3&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;12/24/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;12/30/2020&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Getting some values like below.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Sat, 23 Jan 2021 17:31:44 GMT</pubDate>
    <dc:creator>aditsss</dc:creator>
    <dc:date>2021-01-23T17:31:44Z</dc:date>
    <item>
      <title>How to extract Date from Day format</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536920#M36682</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;&lt;P&gt;I have one field Rundatetime which is in below format:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;10/25/2020 3:57&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;10/16/2020 5:22&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;I just want to extract Date from it as below:&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;10/25/2020 &lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;10/16/2020&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;How can I do that. Can someone guide me&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;My current query is this:&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;| inputlookup mnr_rally_defects2.csv| table&amp;nbsp;Rundatetime&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Sat, 23 Jan 2021 12:48:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536920#M36682</guid>
      <dc:creator>aditsss</dc:creator>
      <dc:date>2021-01-23T12:48:13Z</dc:date>
    </item>
    <item>
      <title>How to extract Date from Day format</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536923#M36683</link>
      <description>&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;| inputlookup mnr_rally_defects2.csv| eval date_today=substr(Rundatetime ,1,11)&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Sat, 23 Jan 2021 13:25:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536923#M36683</guid>
      <dc:creator>termcap</dc:creator>
      <dc:date>2021-01-23T13:25:07Z</dc:date>
    </item>
    <item>
      <title>Re: How to extract Date from Day format</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536931#M36688</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225066"&gt;@aditsss&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;you can use the solution of&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/229611"&gt;@termcap&lt;/a&gt;, that surely works, or the following regex:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| rex field=Rundatetime "^(?&amp;lt;date&amp;gt;[^ ]+)"&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sat, 23 Jan 2021 17:45:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536931#M36688</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2021-01-23T17:45:25Z</dc:date>
    </item>
    <item>
      <title>Re: How to extract Date from Day format</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536932#M36689</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352"&gt;@gcusello&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I am not getting all the dates correct :&lt;/P&gt;&lt;TABLE&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD&gt;1/8/2021 3:&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;1/9/2021 3:&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;10/16/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;10/17/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;10/20/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;10/25/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;10/27/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;11/14/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;11/17/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;11/18/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;12/2/2020 3&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;12/24/2020&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;12/30/2020&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Getting some values like below.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sat, 23 Jan 2021 17:31:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536932#M36689</guid>
      <dc:creator>aditsss</dc:creator>
      <dc:date>2021-01-23T17:31:44Z</dc:date>
    </item>
    <item>
      <title>Re: How to extract Date from Day format</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536933#M36690</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225066"&gt;@aditsss&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;for this reason I hinted to use rex instead substr!&lt;/P&gt;&lt;P&gt;Try again with my rex hint.&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Sat, 23 Jan 2021 17:34:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536933#M36690</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2021-01-23T17:34:22Z</dc:date>
    </item>
    <item>
      <title>Re: How to extract Date from Day format</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536934#M36691</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352"&gt;@gcusello&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I used like&amp;nbsp; this:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;| inputlookup mnr_rally_defects1.csv| rex field=rundatetime "?(?&amp;lt;date&amp;gt;[^ ]+)"| table date&lt;/P&gt;&lt;P&gt;getting below error:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Error in 'rex' command: Encountered the following error while compiling the regex '?(?&amp;lt;date&amp;gt;[^ ]+)': Regex: quantifier does not follow a repeatable item.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sat, 23 Jan 2021 17:40:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536934#M36691</guid>
      <dc:creator>aditsss</dc:creator>
      <dc:date>2021-01-23T17:40:02Z</dc:date>
    </item>
    <item>
      <title>Re: How to extract Date from Day format</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536935#M36692</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225066"&gt;@aditsss&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;sorry!&lt;/P&gt;&lt;P&gt;there was a typing error, please try this:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| rex field=Rundatetime "^(?&amp;lt;date&amp;gt;[^ ]+)"&lt;/LI-CODE&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Sat, 23 Jan 2021 17:46:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-extract-Date-from-Day-format/m-p/536935#M36692</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2021-01-23T17:46:34Z</dc:date>
    </item>
  </channel>
</rss>

