https://community.splunk.com/t5/Splunk-Search/How-to-create-n-strings-for-n-months/m-p/409372#M118095 <P>I need to create monthly filenames (2018-06-01.csv, 2018-07-01.csv, etc.) for n months. I can do something similar by day with n=30:</P> <PRE><CODE>| makeresults | eval count=mvrange(0,30,1) | mvexpand count | eval filename=strftime(now()-count\*86400 </CODE></PRE> <P>How do I do this by month, something similar to the below syntax?</P> <PRE><CODE>| makeresults | eval count=mvrange(0,12,1) | mvexpand count | eval filename=strftime(relative_time(now(), count \* "-1mon") </CODE></PRE> Wed, 15 Aug 2018 21:25:18 GMT nick405060 2018-08-15T21:25:18Z https://community.splunk.com/t5/Splunk-Search/How-to-create-n-strings-for-n-months/m-p/409372#M118095 <P>I need to create monthly filenames (2018-06-01.csv, 2018-07-01.csv, etc.) for n months. I can do something similar by day with n=30:</P> <PRE><CODE>| makeresults | eval count=mvrange(0,30,1) | mvexpand count | eval filename=strftime(now()-count\*86400 </CODE></PRE> <P>How do I do this by month, something similar to the below syntax?</P> <PRE><CODE>| makeresults | eval count=mvrange(0,12,1) | mvexpand count | eval filename=strftime(relative_time(now(), count \* "-1mon") </CODE></PRE> Wed, 15 Aug 2018 21:25:18 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-n-strings-for-n-months/m-p/409372#M118095 nick405060 2018-08-15T21:25:18Z https://community.splunk.com/t5/Splunk-Search/How-to-create-n-strings-for-n-months/m-p/409373#M118096 <P>Turns out it was pretty easy:</P> <P>| makeresults | eval count=mvrange(0,12,1) | mvexpand count | eval modifier="-"+tostring(count)+"mon" | eval filename=strftime(relative_time(now(),modifier),"%Y-%m-%d.csv")</P> Wed, 15 Aug 2018 22:43:29 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-n-strings-for-n-months/m-p/409373#M118096 nick405060 2018-08-15T22:43:29Z