extract month from a date field

kajolsharma — Mon, 06 Sep 2021 14:02:18 GMT

Hi, I hav a "Planned Start date" Field through which I am trying to extract month in the format (e.g January).Can somebody suggest? Below is what i have tried

index="tier1" sourcetype="csv"| stats latest("Planned Start Date") AS Time| eval monthdisplay=strftime(strptime('Planned Start Date',"%m-%d-%Y"),"%B")|fields Time monthdisplay

Re: extract month from a date field

gcusello — Mon, 06 Sep 2021 14:10:23 GMT

Hi @kajolsharma,

There two errors:

The field name to use is "Time",
date form is wrong.

please try something like this:

index="tier1" sourcetype="csv" | stats latest("Planned Start Date") AS Time | eval monthdisplay=strftime(strptime(Time,"%m/%d/%Y"),"%B") | fields Time monthdisplay

Eventually use double quotes also in the strptime function and, possibly, avoid spaces in the field names!

Ciao.

Giuseppe

topic extract month from a date field in Reporting

extract month from a date field

Re: extract month from a date field