Splunk Search

How can I start each week from tuesday?

nikita012
New Member

Below is my code. It starts each week from sunday. How can start each week from tuesday? Do I need to change anything in +1w@w?

| eval weeknum=strftime(relative_time(strptime(Date,"%d-%b"),"+1w@w"),"%Y/%V")

Tags (2)
0 Karma
1 Solution

niketn
Legend

@nikita012 seems like this is a followup question to your previous question. https://answers.splunk.com/answers/738645/convert-week-number-to-the-1st-date-in-that-week.html

You can use the following snap-to setting to set to Tuesday "-0w@w+2d". Also if your previous question is resolved kindly accept/upvote that as well.

| eval WeekStartDate=strftime(relative_time(strptime(MinTime,"%m/%d/%Y"),"-0w@w+2d"),"%m/%d/%Y") 
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

niketn
Legend

@nikita012 seems like this is a followup question to your previous question. https://answers.splunk.com/answers/738645/convert-week-number-to-the-1st-date-in-that-week.html

You can use the following snap-to setting to set to Tuesday "-0w@w+2d". Also if your previous question is resolved kindly accept/upvote that as well.

| eval WeekStartDate=strftime(relative_time(strptime(MinTime,"%m/%d/%Y"),"-0w@w+2d"),"%m/%d/%Y") 
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...

4 Ways the Splunk Community Helps You Prepare for .conf25

.conf25 is right around the corner, and whether you’re a first-time attendee or a seasoned Splunker, the ...