https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275835#M83217 <P>Just add this:</P> <PRE><CODE>| fieldformat _time = "week " . strftime(_time, "%U") </CODE></PRE> Mon, 30 May 2016 18:35:51 GMT woodcock 2016-05-30T18:35:51Z https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275834#M83216 <P>How to change the _time text in the table?</P> <P>How to change in _time of "2016-04-01" to "first week", for example.</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/1426iC4BA98C50E4CC749/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>Thank You</P> Mon, 30 May 2016 18:05:06 GMT https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275834#M83216 renanprado96 2016-05-30T18:05:06Z https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275835#M83217 <P>Just add this:</P> <PRE><CODE>| fieldformat _time = "week " . strftime(_time, "%U") </CODE></PRE> Mon, 30 May 2016 18:35:51 GMT https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275835#M83217 woodcock 2016-05-30T18:35:51Z https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275836#M83218 <P>Its Possible to change the week number for the month?<BR /> Of 1-5?</P> <PRE><CODE>Days 1-7 - week 1 Days 8-14 - week 2 Days 15-21 - week 3 Days 22-28 - week 4 Days 29-31 - week 5 </CODE></PRE> Mon, 30 May 2016 19:13:05 GMT https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275836#M83218 renanprado96 2016-05-30T19:13:05Z https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275837#M83219 <P><A href="http://apidock.com/ruby/DateTime/strftime">strftime</A></P> <P>doesn't have such an option, only the week of the year...</P> Mon, 30 May 2016 20:37:46 GMT https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275837#M83219 ddrillic 2016-05-30T20:37:46Z https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275838#M83220 <P>Like this:</P> <PRE><CODE>| fieldformat _time = case((tonumber(strftime(_time, "%d")) &lt;= 7), "1", (tonumber(strftime(_time, "%d")) &lt;= 14), "2", (tonumber(strftime(_time, "%d")) &lt;= 21), "3", (tonumber(strftime(_time, "%d")) &lt;= 28), "4", true(), "5") </CODE></PRE> Tue, 31 May 2016 12:09:50 GMT https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275838#M83220 woodcock 2016-05-31T12:09:50Z https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275839#M83221 <P>Thank you!!!<BR /> Have a good day..</P> Tue, 31 May 2016 13:56:55 GMT https://community.splunk.com/t5/Splunk-Search/How-to-change-the-time-text-in-the-table/m-p/275839#M83221 renanprado96 2016-05-31T13:56:55Z