Splunk Search

Contact strptime date conversion

jcisha
Path Finder

is converted to,2013-03-1 strftime (_time, "%Y-%m-%W").
However, the
and strptime (strftime (_time, "%Y-%m-%W"), "%Y-%m-%W"), not converted.

I want to know how to solve.

Tags (1)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

In case you're trying to "round down" a timestamp to the start of the week you should do this instead:

eval my_time = relative_time(_time, "@w1")

If you consider Sunday to be the start of the week you can use @w or @w0.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...