How to create a search for date compare to get the exact output?

[renuka]

I am trying on date compare but i am unable to get the exact output

The condition for Date Compare:

if(First_Date.before(Verifed_Date ) consider the value as 1,
else if(First_Date.equals(Verifed_Date ) consider the values as 0,
else consider the r value as 2;
if D2_ExecutionDate is null or empty mean verified should be null
Verified Condition is:

(Date Compare(Verifed_Date ,First_Date == 0 || Verifed_Date ,First_Date == 1)
&& (Verifed_Date ,Second_Date == 2 || Verifed_Date, Second_Date == 0))
get the verified values from PhaseMapping verified = R06.1

For reference i attached a screenshot..please help me with this

Thanks in advance

Renuka

[bowesmana]

You are comparing strings by quoting the field names in the case statement. Remove the quotes then you will compare fields, not the string values, i.e.

| eval DateCompare=case(First_Date<verified_Date,1,...)

 Also make sure the OR and AND boolean operators are in CAPS, not lower case as in your screenshot.

[thambisetty · Accepted solution]

For date comparison, you should first convert any date format to epoch. Then you can compare.

share complete raw event with field names.