https://community.splunk.com/t5/Splunk-Search/How-to-create-a-search-for-date-compare-to-get-the-exact-output/m-p/512314#M143689 <P>For date comparison, you should first convert any date format to epoch. Then you can compare.</P><P>share complete raw event with field names.&nbsp;</P> Tue, 04 Aug 2020 09:24:25 GMT thambisetty 2020-08-04T09:24:25Z https://community.splunk.com/t5/Splunk-Search/How-to-create-a-search-for-date-compare-to-get-the-exact-output/m-p/512312#M143688 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="renuka_0-1596532169866.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10023i9AFDD7918EB69DD3/image-size/medium?v=v2&amp;px=400" role="button" title="renuka_0-1596532169866.png" alt="renuka_0-1596532169866.png" /></span></P> <P>I am trying on date compare but i am unable to get the exact output</P> <P>The condition for Date Compare:</P> <LI-CODE lang="markup">if(First_Date.before(Verifed_Date ) consider the value as 1, else if(First_Date.equals(Verifed_Date ) consider the values as 0, else consider the r value as 2; if D2_ExecutionDate is null or empty mean verified should be null Verified Condition is: (Date Compare(Verifed_Date ,First_Date == 0 || Verifed_Date ,First_Date == 1) &amp;&amp; (Verifed_Date ,Second_Date == 2 || Verifed_Date, Second_Date == 0)) get the verified values from PhaseMapping verified = R06.1</LI-CODE> <P>For reference i attached a screenshot..please help me with this</P> <P>Thanks in advance</P> <P>Renuka</P> Wed, 05 Aug 2020 05:41:51 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-search-for-date-compare-to-get-the-exact-output/m-p/512312#M143688 renuka 2020-08-05T05:41:51Z https://community.splunk.com/t5/Splunk-Search/How-to-create-a-search-for-date-compare-to-get-the-exact-output/m-p/512314#M143689 <P>For date comparison, you should first convert any date format to epoch. Then you can compare.</P><P>share complete raw event with field names.&nbsp;</P> Tue, 04 Aug 2020 09:24:25 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-search-for-date-compare-to-get-the-exact-output/m-p/512314#M143689 thambisetty 2020-08-04T09:24:25Z https://community.splunk.com/t5/Splunk-Search/How-to-create-a-search-for-date-compare-to-get-the-exact-output/m-p/512476#M143737 <P>You are comparing strings by quoting the field names in the case statement. Remove the quotes then you will compare fields, not the string values, i.e.</P><LI-CODE lang="markup">| eval DateCompare=case(First_Date&lt;verified_Date,1,...)</LI-CODE><P>&nbsp;Also make sure the OR and AND boolean operators are in CAPS, not lower case as in your screenshot.</P><P>&nbsp;</P> Wed, 05 Aug 2020 01:29:54 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-search-for-date-compare-to-get-the-exact-output/m-p/512476#M143737 bowesmana 2020-08-05T01:29:54Z