extract month from a date field

[kajolsharma]

Hi, I hav a "Planned Start date" Field through which I am trying to extract month in the format (e.g January).Can somebody suggest? Below is what i have tried 

index="tier1" sourcetype="csv"| stats latest("Planned Start Date") AS Time| eval monthdisplay=strftime(strptime('Planned Start Date',"%m-%d-%Y"),"%B")|fields Time monthdisplay

[gcusello]

Hi @kajolsharma,

There two errors:

• The field name to use is "Time",
• date form is wrong.

please try something like this:

index="tier1" sourcetype="csv"
| stats latest("Planned Start Date") AS Time
| eval monthdisplay=strftime(strptime(Time,"%m/%d/%Y"),"%B")
| fields Time monthdisplay

Eventually use double quotes also in the strptime function and, possibly, avoid spaces in the field names!

Ciao.

Giuseppe