Getting Data In

How to turn string into date format?

vishalduttauk
Path Finder

I have a string of data and i've created regex to break down that set into different fields. There are date values within it (start_date and end_date) but format is ddmmyyy i.e. 2901012001.How can i convert it into DD-MM-YYYY so Splunk recognises it as a date or can be shown in that date format?

Ideally i'd like that to be down on ingestion. I have a props.conf and transforms.conf file for the app this sits in

Labels (2)
1 Solution

gcusello
Esteemed Legend

Hi @vishalduttauk,

this means the the original format is "ddmmyyyy" (with 4 digits for the year), can you confirm?

in this case you can use my eval statement:

| your_date=strftime(strptime(yourfield,"%d%m%Y"),"%d-%m-%Y")

Ciao.

giuseppe

View solution in original post

gcusello
Esteemed Legend

Hi @vishalduttauk,

sorry, it isn't clear what's your fields format: you said "ddmmyyy"  but the sample you used has 10 digits (2901012001), what's the correct one?

Anyway, you have to convert it in epochtime and then in the date format you like, something like this:

| your_date=strftime(strptime(yourfield,"%d%m%Y"),"%d-%m-%Y")

Ciao.

Giuseppe 

0 Karma

vishalduttauk
Path Finder

Hi @gcusello 

 

Thanks for your reply and sorry i pasted in the wrong information as an example but you are correct my message didn't have the correct format. it should have been 01021999.

 

Kind Regards,


Vishal

0 Karma

gcusello
Esteemed Legend

Hi @vishalduttauk,

this means the the original format is "ddmmyyyy" (with 4 digits for the year), can you confirm?

in this case you can use my eval statement:

| your_date=strftime(strptime(yourfield,"%d%m%Y"),"%d-%m-%Y")

Ciao.

giuseppe

vishalduttauk
Path Finder

Thanks @gcusello 

Its the first time i am using eval so it worked after i put in | eval

👍

0 Karma
Get Updates on the Splunk Community!

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...

Announcing General Availability of Splunk Incident Intelligence!

Digital transformation is real! Across industries, companies big and small are going through rapid digital ...