How do I write a search to change the format of a date from "1942-01-24" to "24/01/1942"?

[IRHM73]

Hi,

I wonder whether someone may be able to help me please.

I have a date in one of my searches which is in this format: 1942-01-24

Could someone tell me please if is it possible to change this to: 24/01/1942

Many thanks and kind Regards

Chris

[woodcock]

Like this:

 | stats count | eval date="1942-01-24" | rex mode=sed field=date "s/(\d+)-(\d+)-(\d+)/\3\/\2\/\1/" | table date

[IRHM73]

Hi @woodcock, thank you for taking the time to reply to my post. Your solution works great.

Many thanks and kind regards

Chris

[knielsen · Accepted solution]

Another way of converting would be:

| stats count | eval date="1942-01-24" | eval date=replace(date,"(\d+)-(\d+)-(\d+)","\3/\2/\1") | table date

Hth,
Kai.

[IRHM73]

Hi @kai, thank you for taking the time to reply to my post.

This works perfectly.

Many thanks and kindest regards

Chris

[HiroshiSatoh]

What with this?

・・・・|eval a="2015-10-02"|eval b=strftime(strptime(a,"%Y-%m-%d"),"%d/%m/%Y")|eval c=substr(a,9,2)+"/"+substr(a,6,2)+"/"+substr(a,1,4)|table a b c

However, use the C because that can not be calculated in 1942.

[IRHM73]

Hi, thank you for this.

I changed the date you entered to my field name to get the raw data and I've included a, b and c in my table but unfortunately this doesn't return any data.

Is it also possible that the output could be displayed in one field rather than a, b and c.

Many thanks and kind regards

Chris

[HiroshiSatoh]

Normally I think it is correct to convert using the strptime.
However, the date of the previous 1970 this function does not seem to work.

[IRHM73]

Many thanks, hopefully someone else may be able to look at this.

Kind regards

Chris