Splunk Search

How to convert julian date to dd/mm/Y

kavyamohan
Explorer

SVSCPLEX,S0W1,S0W1.DAL-EBIS.IHOST.COM,SYSLOG,zOS-SYSLOG-Console,SYSLOG,-0400,NE,001C,19283 01.21.46.880 -0500,S0W1 ,JOB03487, ,40000000000000000000000000000000,00000090,TESCREAT,00," IEF450I TESCREAT STEP010 - ABEND=S222 U0000 REASON=00000000"\n.

where, 19283 is julian date. I need to convert this to dd/mm/Y Is that possible?

Tags (2)
0 Karma
1 Solution

kamlesh_vaghela
SplunkTrust
SplunkTrust

@kavyamohan

Can you please try this?

| makeresults 
| eval jdate="19283",epoch_date=strptime(jdate,"%y%j"),date=strftime(epoch_date,"%d/%m/%Y") | table jdate date

View solution in original post

kamlesh_vaghela
SplunkTrust
SplunkTrust

@kavyamohan

Can you please try this?

| makeresults 
| eval jdate="19283",epoch_date=strptime(jdate,"%y%j"),date=strftime(epoch_date,"%d/%m/%Y") | table jdate date

kavyamohan
Explorer

Thanks, it worked

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

Glad to help you.

Happy Splunking

0 Karma

kavyamohan
Explorer

yes i have updated question

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@kavyamohan

Need more clarity:

As per the http://www.longpelaexpertise.com/toolsJulian.php .

Julian Date: 19283
which is Date: 10-Oct-2019. It is giving the only date not %H:%M:%S . Can you please let us know your expected output ??

0 Karma

kavyamohan
Explorer

Sorry. It was my mistake. I need Julian Date: 19283 to this format 10/10/2019

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

It would be really helpful for others if you update the question. 🙂

0 Karma
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...