https://community.splunk.com/t5/Reporting/Formatting-the-report-table/m-p/111283#M2562 <P>Try this</P> <PRE><CODE>index="xyz" source="abc" | timechart span=1h count as Transactions by host | eval Time=strftime(_time, "%H:%M") | convert timeformat="%m-%d-%y" ctime(_time) as Date | fields - _time | table Date, Time, * </CODE></PRE> Fri, 28 Mar 2014 13:35:35 GMT somesoni2 2014-03-28T13:35:35Z https://community.splunk.com/t5/Reporting/Formatting-the-report-table/m-p/111282#M2561 <P>Hello</P> <P>M trying to generate the report by using the below query:-</P> <P>index="xyz" source="abc" | timechart span=1h count as Transactions by host | eval Time=strftime(_time, "%H:%M") | convert timeformat="%m-%d-%y" ctime(_time) as Date </P> <P>My result is in the below format : _time, Date, Time, Host</P> <P>In result m getting the default _time column also. how to eliminate this _time column from the result..??</P> <P>Also i need the report format as Date, Time, Host1 but the generated report file(csv) in mail has _time, Host Date Time..</P> <P>how to format this..?/<BR /> Please help me out..??</P> Mon, 28 Sep 2020 16:15:52 GMT https://community.splunk.com/t5/Reporting/Formatting-the-report-table/m-p/111282#M2561 RashmiGowda 2020-09-28T16:15:52Z https://community.splunk.com/t5/Reporting/Formatting-the-report-table/m-p/111283#M2562 <P>Try this</P> <PRE><CODE>index="xyz" source="abc" | timechart span=1h count as Transactions by host | eval Time=strftime(_time, "%H:%M") | convert timeformat="%m-%d-%y" ctime(_time) as Date | fields - _time | table Date, Time, * </CODE></PRE> Fri, 28 Mar 2014 13:35:35 GMT https://community.splunk.com/t5/Reporting/Formatting-the-report-table/m-p/111283#M2562 somesoni2 2014-03-28T13:35:35Z