How do I get a substring from a field after the "_" character?

[vb1612]

I have a string as ABCD_20190219_XYZ

I need to get 20190219 like 8 characters after first "_" and than convert that substring to a date.

Thanks

[Vijeta · Accepted solution]

You can use rex to get the date substring and then use strptime and strftime to date format. Suppose your string is x="ABCD_20190219_XYZ", then use the below command.

rex field=x "_(?<date>\S{8})"| eval time=strptime(date,"%Y%m%d")|eval Date=strftime(time,"%m/%d/%Y")