Getting Data In

Identifying day of the week/holiday from time stamp date

wdeoliveira_spl
Splunk Employee
Splunk Employee

Hello experts,

Is there any easy way to use Splunk (maybe using look ups or a pre-defined function)to identify if a given event date is a holiday or just a weekend?

Thanks-

Wellington

0 Karma

sundareshr
Legend

Have you tried formatting your date/time to show day of the week? example would be eval dow=strftime(_time, "%a"), this will show Sun for sunday, etc. As for holidays, you can use a lookup table (http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Lookup)

.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!