Dashboards & Visualizations

How to convert date format in monthly stats lookup to daily stats format in HTML dashboard form?

Explorer

We have two lookups in our app. One with monthly stats and another one with daily stats. I'm creating an html form where user can get monthly stats. The date format, in the monthly stats lookup will be like July2014.

I want to have a drilldown of daily stats in the same form. If a user selects a particular month, daily stats of the complete month should be shown. The Date format in the daily stats lookup is 12-Jul-14.

How to convert the date format in the monthly stats lookup to Daily stats format?

0 Karma
1 Solution

Splunk Employee
Splunk Employee

I don't think you have to worry about converting the date in this case... there are some default fields that are created such as date_month that contains the text month and date_year that contains the year. If you make those fields available and use them to extrapolate the month/year... you can use those to drilldown. There are dozens of ways to match the month value to your date field from your lookup. If you look at including those fields, does that narrow it down for you? I don't want to "answer" without a specific solution.

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!

View solution in original post

Splunk Employee
Splunk Employee

I don't think you have to worry about converting the date in this case... there are some default fields that are created such as date_month that contains the text month and date_year that contains the year. If you make those fields available and use them to extrapolate the month/year... you can use those to drilldown. There are dozens of ways to match the month value to your date field from your lookup. If you look at including those fields, does that narrow it down for you? I don't want to "answer" without a specific solution.

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!

View solution in original post

Explorer

Thanks rsebbett_splunk. Used date_month fields in the drilldown and got required result

0 Karma

Champion

This APPS why not helpful?
Date at the end of the month and the beginning of the month has also edited in the extract search the years in the select list.

http://apps.splunk.com/app/1560/

0 Karma

Explorer

It the part of timestamp. I want to convert the Month to Days like if i select July-14, i should get 1st July to 31st July values.

0 Karma

Splunk Employee
Splunk Employee

Is the date part of the timestamp or is this just really pattern matching?

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!
0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!