How to convert this numeric field to a date format? "20150223" to "2015-02-23"

[isedrof]

Hi everybody,

I need your help please, i want to convert a numeric field to a date.
Ex: "20150223" >> "2015-02-23"

Thank you.

[somesoni2 · Accepted solution]

Following are different ways

1) Using eval command

...| eval ProperDate=replace(tostring(NumericDate),"(\d{4})(\d{2})(\d{2})","\1-\2-\3" )
...| eval ProperDate=strftime(strptime(NumericDate,"%Y%m%d"),"%Y-%m-%d"))

2) Using rex command (overwrite the same field)

...| rex field=NumericDate mode=sed "s/(\d{4})(\d{2})(\d{2})/\1-\2-\3/g"

[isedrof]

Thank you guys, i tried the solution of @somesoni2 and it workes nicely.
Thanks again.

[frobinson_splun]

Hi @isedrof,
Have you tried the "convert" command to convert the numeric fields to dates? Here is some documentation for the command and for date and time variables:
http://docs.splunk.com/Documentation/Splunk/6.2.5/SearchReference/Convert
http://docs.splunk.com/Documentation/Splunk/6.2.5/SearchReference/Commontimeformatvariables

Hope this helps!
All best,
@frobinson_splunk