How to convert a date field from YYYY-MM-DD to MM-DD-YYYY?

[dbcase]

Hi,

I have a field in a CSV file called CREATION_DATE and currently the value in the field is (example: 2015-4-5.4.19. 50. 526000000)

I'm looking to convert it to MM/DD/YYYY (don't really need the Hour, minute, seconds)

I've tried things like

strftime(strptime(CREATION_DATE,"%Y-%m-%d. %H.%M.%S %p"),"%m-%d-%Y")
strftime(CREATION_DATE,"%m %d %Y")

and others with no luck. I'm pretty new at Splunk so I'm struggling a bit 🙂

Any thoughts?

[ddrillic]

The followings seems to be fine -

| eval CREATION_DATE="2015-4-5.19 .50"
| eval xxxx=strptime(CREATION_DATE,"%Y-%m-%d.%H .%M")

Not sure about 526000000...

[ddrillic]

ok, a bit better -

| eval CREATION_DATE="2015-4-5.19 .50 .526000000"
| eval xxxx=strptime(CREATION_DATE,"%Y-%m-%d.%H .%M .%Q")