topic Re: Is there a function to get the week day from any given epoch time? in Splunk Search https://community.splunk.com/t5/Splunk-Search/Is-there-a-function-to-get-the-week-day-from-any-given-epoch/m-p/121069#M32554 <P><CODE>&lt;search&gt; | eval dayofweekshort=strftime(epochtime,"%a") | eval dayofweekfull=strftime(epochtime,"%A") | eval dayofweekasnumber=strftime(epochtime,"%w")</CODE></P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Commontimeformatvariables">http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Commontimeformatvariables</A></P> Thu, 11 Sep 2014 14:19:19 GMT aweitzman 2014-09-11T14:19:19Z Is there a function to get the week day from any given epoch time? https://community.splunk.com/t5/Splunk-Search/Is-there-a-function-to-get-the-week-day-from-any-given-epoch/m-p/121067#M32552 <P>I know how to get the week day from raw events, the week day is stored in the field date_wday.<BR /> However, I wonder if there's a function to compute the week day from an epoch time, as I want to get it from a field on a table which doesn't come from a raw event _time. </P> Thu, 11 Sep 2014 14:13:40 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-function-to-get-the-week-day-from-any-given-epoch/m-p/121067#M32552 manus 2014-09-11T14:13:40Z Re: Is there a function to get the week day from any given epoch time? https://community.splunk.com/t5/Splunk-Search/Is-there-a-function-to-get-the-week-day-from-any-given-epoch/m-p/121068#M32553 <P>I once again replied to my own question... Maybe I shouldn't ask so quickly...<BR /><BR /> |eval date_wday=strftime(epochtime,"%w")</P> Thu, 11 Sep 2014 14:18:23 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-function-to-get-the-week-day-from-any-given-epoch/m-p/121068#M32553 manus 2014-09-11T14:18:23Z Re: Is there a function to get the week day from any given epoch time? https://community.splunk.com/t5/Splunk-Search/Is-there-a-function-to-get-the-week-day-from-any-given-epoch/m-p/121069#M32554 <P><CODE>&lt;search&gt; | eval dayofweekshort=strftime(epochtime,"%a") | eval dayofweekfull=strftime(epochtime,"%A") | eval dayofweekasnumber=strftime(epochtime,"%w")</CODE></P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Commontimeformatvariables">http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Commontimeformatvariables</A></P> Thu, 11 Sep 2014 14:19:19 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-function-to-get-the-week-day-from-any-given-epoch/m-p/121069#M32554 aweitzman 2014-09-11T14:19:19Z