Splunk Search

How can I start each week from tuesday?

nikita012
New Member

Below is my code. It starts each week from sunday. How can start each week from tuesday? Do I need to change anything in +1w@w?

| eval weeknum=strftime(relative_time(strptime(Date,"%d-%b"),"+1w@w"),"%Y/%V")

Tags (2)
0 Karma
1 Solution

niketn
Legend

@nikita012 seems like this is a followup question to your previous question. https://answers.splunk.com/answers/738645/convert-week-number-to-the-1st-date-in-that-week.html

You can use the following snap-to setting to set to Tuesday "-0w@w+2d". Also if your previous question is resolved kindly accept/upvote that as well.

| eval WeekStartDate=strftime(relative_time(strptime(MinTime,"%m/%d/%Y"),"-0w@w+2d"),"%m/%d/%Y") 
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

niketn
Legend

@nikita012 seems like this is a followup question to your previous question. https://answers.splunk.com/answers/738645/convert-week-number-to-the-1st-date-in-that-week.html

You can use the following snap-to setting to set to Tuesday "-0w@w+2d". Also if your previous question is resolved kindly accept/upvote that as well.

| eval WeekStartDate=strftime(relative_time(strptime(MinTime,"%m/%d/%Y"),"-0w@w+2d"),"%m/%d/%Y") 
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...