https://community.splunk.com/t5/Splunk-Search/Howto-use-time-to-compare-with-field-with-time/m-p/433115#M171648 <P>Wow thanks, it works!</P> Sun, 28 Apr 2019 11:34:15 GMT krusovice 2019-04-28T11:34:15Z https://community.splunk.com/t5/Splunk-Search/Howto-use-time-to-compare-with-field-with-time/m-p/433113#M171646 <P>Hello,</P> <P>I've a field with date/time in it. The field name is system_created_on=2019-04-26 09:38:24.</P> <P>I have a time picker and I would like to use the date selected to compare with a field with date/time. For example, when user select 4/26/2019, I need to have the query to match with"2019-04-26" from system_created_on field. How can I achieve this?</P> <P>Thanks.</P> Wed, 30 Sep 2020 00:17:33 GMT https://community.splunk.com/t5/Splunk-Search/Howto-use-time-to-compare-with-field-with-time/m-p/433113#M171646 krusovice 2020-09-30T00:17:33Z https://community.splunk.com/t5/Splunk-Search/Howto-use-time-to-compare-with-field-with-time/m-p/433114#M171647 <P>Like this:</P> <PRE><CODE>index=YouShouldAlwaysSpecifyAnIndex AND sourcetype=AndSourcetypeToo eatliest=0 latest=now | eval system_created_on=strptime(system_created_on, "%Y-%m-%d %H:%M:%S") | addinfo | where (system_created_on &gt;= info_min_time AND system_created_on &lt;= info_max_time) | fieldformat system_created_on=strftime(system_created_on, "%Y-%m-%d %H:%M:%S") </CODE></PRE> Sun, 28 Apr 2019 02:45:38 GMT https://community.splunk.com/t5/Splunk-Search/Howto-use-time-to-compare-with-field-with-time/m-p/433114#M171647 woodcock 2019-04-28T02:45:38Z https://community.splunk.com/t5/Splunk-Search/Howto-use-time-to-compare-with-field-with-time/m-p/433115#M171648 <P>Wow thanks, it works!</P> Sun, 28 Apr 2019 11:34:15 GMT https://community.splunk.com/t5/Splunk-Search/Howto-use-time-to-compare-with-field-with-time/m-p/433115#M171648 krusovice 2019-04-28T11:34:15Z