https://community.splunk.com/t5/Splunk-Search/Date-Format-in-required-form/m-p/174400#M50045 <P>Try this:</P> <PRE><CODE>... | eval newdate = upper(strftime(strptime(date+"01", "%Y%m%d"), "%b-%y")) </CODE></PRE> Wed, 05 Mar 2014 09:05:37 GMT martin_mueller 2014-03-05T09:05:37Z https://community.splunk.com/t5/Splunk-Search/Date-Format-in-required-form/m-p/174397#M50042 <P>Hi i have a Date in the below form</P> <P>201304<BR /> 201306<BR /> 201307</P> <P>I want to convert to these to below form</P> <P>APR-13<BR /> JUN-13<BR /> JUL-13</P> <P>Please help me in this</P> <P>Thanking you</P> Wed, 05 Mar 2014 07:37:24 GMT https://community.splunk.com/t5/Splunk-Search/Date-Format-in-required-form/m-p/174397#M50042 ncbshiva 2014-03-05T07:37:24Z https://community.splunk.com/t5/Splunk-Search/Date-Format-in-required-form/m-p/174398#M50043 <P>You can do that with a combination of strptime and strftime, see <A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/CommonEvalFunctions">http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/CommonEvalFunctions</A> for reference.</P> Wed, 05 Mar 2014 08:35:43 GMT https://community.splunk.com/t5/Splunk-Search/Date-Format-in-required-form/m-p/174398#M50043 martin_mueller 2014-03-05T08:35:43Z https://community.splunk.com/t5/Splunk-Search/Date-Format-in-required-form/m-p/174399#M50044 <P>i tried to convert using above functions, but didn,t work.<BR /> Please help me .</P> Wed, 05 Mar 2014 08:48:57 GMT https://community.splunk.com/t5/Splunk-Search/Date-Format-in-required-form/m-p/174399#M50044 ncbshiva 2014-03-05T08:48:57Z https://community.splunk.com/t5/Splunk-Search/Date-Format-in-required-form/m-p/174400#M50045 <P>Try this:</P> <PRE><CODE>... | eval newdate = upper(strftime(strptime(date+"01", "%Y%m%d"), "%b-%y")) </CODE></PRE> Wed, 05 Mar 2014 09:05:37 GMT https://community.splunk.com/t5/Splunk-Search/Date-Format-in-required-form/m-p/174400#M50045 martin_mueller 2014-03-05T09:05:37Z