Hi i have a Date in the below form
I want to convert to these to below form
Please help me in this
You can do that with a combination of strptime and strftime, see http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/CommonEvalFunctions for reference.
View solution in original post
... | eval newdate = upper(strftime(strptime(date+"01", "%Y%m%d"), "%b-%y"))
i tried to convert using above functions, but didn,t work.
Please help me .