Hi All,
I have one requirement .
I have one lookup in which there are two columns:
RunDateTime and Closed Time
RunDateTime - 2021-09-21 03:58:07
CLosedTime - 2019-01-08T14:50:36.000+0000
I need both RunDateTime and closedTime in below format:
RunDateTime- 2021-09-21
ClosedTime- 2019-01-08
query:
|inputlookup SDC.csv| table RunDateTime ClosedTime
Very simply, you can do
| inputlookup SDC.csv
| eval RunDateTime=substr(RunDateTime,1,10), ClosedTime=substr(ClosedTime,1,10)
| table RunDateTime ClosedTime
which is just taking the first 10 characters of the string, as long as your data is well structures, i.e. leading zeros are used in days and months.
It was working for me previously . But I added one more column at the end of my lookup and after that I am getting rundatetime in the below Format.
Can you guide me on that:
rundatetime
12/30/2020 |
12/24/2020 |
12/2/2020 |
11/18/2020 |
11/17/2020 |
11/14/2020 |
10/27/2020 |
10/25/2020 |
10/20/2020 |
10/17/2020 |
10/16/2020 |
1/9/2021 3 |
1/8/2021 3 |
I want it in proper Date format. Can you guide me on that.