Getting Data In

Identifying day of the week/holiday from time stamp date

Splunk Employee
Splunk Employee

Hello experts,

Is there any easy way to use Splunk (maybe using look ups or a pre-defined function)to identify if a given event date is a holiday or just a weekend?



0 Karma


Have you tried formatting your date/time to show day of the week? example would be eval dow=strftime(_time, "%a"), this will show Sun for sunday, etc. As for holidays, you can use a lookup table (

*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>