topic Re: How to extract month and year from _time in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-extract-month-and-year-from-time/m-p/432845#M173270 <P>Thank you...</P> Wed, 30 Jan 2019 12:42:23 GMT sbhatnagar88 2019-01-30T12:42:23Z How to extract month and year from _time https://community.splunk.com/t5/Splunk-Search/How-to-extract-month-and-year-from-time/m-p/432842#M173267 <P>_ time is in below format</P> <P>2019-01-30 07:10:51.191<BR /> 2019-01-30 07:10:51.190<BR /> 2019-01-30 07:10:51.189</P> <P>I need output in below format</P> <P>January 2019</P> <P>Any help would be highly appreciable...</P> Wed, 30 Jan 2019 10:46:25 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-month-and-year-from-time/m-p/432842#M173267 sbhatnagar88 2019-01-30T10:46:25Z Re: How to extract month and year from _time https://community.splunk.com/t5/Splunk-Search/How-to-extract-month-and-year-from-time/m-p/432843#M173268 <P>Try this:</P> <PRE><CODE>&lt;your base search&gt; | eval yourtime = strftime(_time,"%B %Y) </CODE></PRE> <P>the field <CODE>yourtime</CODE> will then contain the timestamp in the requested format.</P> Wed, 30 Jan 2019 12:32:46 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-month-and-year-from-time/m-p/432843#M173268 DMohn 2019-01-30T12:32:46Z Re: How to extract month and year from _time https://community.splunk.com/t5/Splunk-Search/How-to-extract-month-and-year-from-time/m-p/432844#M173269 <P>Hello <a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/158927">@sbhatnagar88</a></P> <P>Try this:<BR /> index=_internal | head 1 | table _time | eval time= strftime(_time, "%B %Y")</P> Tue, 29 Sep 2020 23:00:54 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-month-and-year-from-time/m-p/432844#M173269 vishaltaneja070 2020-09-29T23:00:54Z Re: How to extract month and year from _time https://community.splunk.com/t5/Splunk-Search/How-to-extract-month-and-year-from-time/m-p/432845#M173270 <P>Thank you...</P> Wed, 30 Jan 2019 12:42:23 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-month-and-year-from-time/m-p/432845#M173270 sbhatnagar88 2019-01-30T12:42:23Z Re: How to extract month and year from _time https://community.splunk.com/t5/Splunk-Search/How-to-extract-month-and-year-from-time/m-p/432846#M173271 <P>Thank you...</P> Wed, 30 Jan 2019 12:42:32 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-month-and-year-from-time/m-p/432846#M173271 sbhatnagar88 2019-01-30T12:42:32Z