topic Re: How to extract only date from the mentioned string in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396653#M172832 <P>hi<BR /> please accept my answer.</P> Fri, 01 Mar 2019 08:53:04 GMT vnravikumar 2019-03-01T08:53:04Z How to extract only date from the mentioned string https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396648#M172827 <P>Below is the kind of string i have and I want to extract only date from it.</P> <P>Available string: 2019-02-24T16:05:37.000ZT16:05:37.000Z<BR /> Desired output: 2019-02-24</P> <P>Thanks</P> Mon, 25 Feb 2019 07:22:13 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396648#M172827 sbhatnagar88 2019-02-25T07:22:13Z Re: How to extract only date from the mentioned string https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396649#M172828 <P>Hi</P> <P>Try like</P> <PRE><CODE>rex field=specify_your_field "(?P&lt;date&gt;\d{4}-\d{2}-\d{2})" </CODE></PRE> Mon, 25 Feb 2019 07:29:01 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396649#M172828 vnravikumar 2019-02-25T07:29:01Z Re: How to extract only date from the mentioned string https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396650#M172829 <P>That worked...Thanks.. In case I need time as well in my output?</P> Mon, 25 Feb 2019 08:55:44 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396650#M172829 sbhatnagar88 2019-02-25T08:55:44Z Re: How to extract only date from the mentioned string https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396651#M172830 <P>Hi @sbhatnagar88</P> <P>Please try the following and accept the answer.</P> <PRE><CODE>(?P&lt;date&gt;\d{4}-\d{2}-\d{2})T(?P&lt;Time&gt;\d{2}:\d{2}:\d{2}) </CODE></PRE> Mon, 25 Feb 2019 15:18:09 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396651#M172830 vnravikumar 2019-02-25T15:18:09Z Re: How to extract only date from the mentioned string https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396652#M172831 <P>Thanks...That worked..</P> Fri, 01 Mar 2019 08:38:43 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396652#M172831 sbhatnagar88 2019-03-01T08:38:43Z Re: How to extract only date from the mentioned string https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396653#M172832 <P>hi<BR /> please accept my answer.</P> Fri, 01 Mar 2019 08:53:04 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-only-date-from-the-mentioned-string/m-p/396653#M172832 vnravikumar 2019-03-01T08:53:04Z