https://community.splunk.com/t5/Splunk-Search/Accounting-for-weekends-and-holidays/m-p/371765#M109389 <P>I'm trying to come up with a method of accounting for weekends and holidays. Tell me, how should I implement this algorithm?<BR /> Real case: we need to catch response on the application after 2 working days subject to weekends and holidays.</P> <P>There is the idea to implement it with a lookup, however, will have to manually affix the holidays every year. I would like to automate this process completely.</P> Wed, 10 May 2017 13:45:37 GMT AlexeyPy 2017-05-10T13:45:37Z https://community.splunk.com/t5/Splunk-Search/Accounting-for-weekends-and-holidays/m-p/371765#M109389 <P>I'm trying to come up with a method of accounting for weekends and holidays. Tell me, how should I implement this algorithm?<BR /> Real case: we need to catch response on the application after 2 working days subject to weekends and holidays.</P> <P>There is the idea to implement it with a lookup, however, will have to manually affix the holidays every year. I would like to automate this process completely.</P> Wed, 10 May 2017 13:45:37 GMT https://community.splunk.com/t5/Splunk-Search/Accounting-for-weekends-and-holidays/m-p/371765#M109389 AlexeyPy 2017-05-10T13:45:37Z https://community.splunk.com/t5/Splunk-Search/Accounting-for-weekends-and-holidays/m-p/371766#M109390 <P>Hi AlexeyPy,<BR /> for week-ends you can add to your searches</P> <PRE><CODE>date_wday="sunday" OR date_wday="saturday" </CODE></PRE> <P>instead to manage holydays the only way is to create a lookup containing holyday dates and use it to filter your searches.</P> <PRE><CODE>your_search (date_wday="sunday" OR date_wday="saturday" OR [ | inputlookup holydays.csv | fields date ] ) </CODE></PRE> <P>putting attention on the date format that must be the same for _time and your lookup.</P> <P>Bye.<BR /> Giuseppe</P> Wed, 10 May 2017 14:14:07 GMT https://community.splunk.com/t5/Splunk-Search/Accounting-for-weekends-and-holidays/m-p/371766#M109390 gcusello 2017-05-10T14:14:07Z