Getting Data In

Identifying day of the week/holiday from time stamp date

Splunk Employee
Splunk Employee

Hello experts,

Is there any easy way to use Splunk (maybe using look ups or a pre-defined function)to identify if a given event date is a holiday or just a weekend?



0 Karma


Have you tried formatting your date/time to show day of the week? example would be eval dow=strftime(_time, "%a"), this will show Sun for sunday, etc. As for holidays, you can use a lookup table (

.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!