- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
shreyasamin64
Explorer
11-30-2021
04:49 AM
need help on eval function of trimming the month
EX : April = APR
all months first 3 letters
thanks
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Gr0und_Z3r0
Contributor
12-01-2021
12:09 AM
| makeresults
| eval months="January February March April May June July August September October November December"
| makemv delim=" " months
| mvexpand months
| eval short-month=upper(substr(months,1,3))
| fields - _time
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Gr0und_Z3r0
Contributor
12-01-2021
12:09 AM
| makeresults
| eval months="January February March April May June July August September October November December"
| makemv delim=" " months
| mvexpand months
| eval short-month=upper(substr(months,1,3))
| fields - _time
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer

SplunkTrust
11-30-2021
05:12 AM
| eval month=substr(month,1,3)
