How to expand the dates between two dates?

[Sankar_g30]

I want to display the date between two date range EX. 3/11 -3/19

Field : SDate= 3/11/2018 EDate=3/19/2018

I need the output as 3/11 , 3/12, 3/13.....3/19.

[javiergn]

@Sankar_g30 please do not forget to accept an answer if you are happy with it

[mayurr98]

hey try this run anywhere search

| makeresults 
| eval SDate="3/11/2018",EDate="3/19/2018" 
| rex field=SDate "(?<sdate>\d+\/\d+)" 
| rex field=EDate "(?<edate>\d+\/\d+)"

In your environment, you should write

<your_base_Search> | rex field=SDate "(?<sdate>\d+\/\d+)" | rex field=EDate "(?<edate>\d+\/\d+)"

let me know if this helps!

[javiergn]

Hi,

Use gentimes for that:

| gentimes start=3/11/2018 end=3/19/2018 increment=1d
| eval dates = strftime(starttime, "%m/%d")
| table dates

Output:

If you want to get rid of the leading zeros I can show you how to do that too.

Regards,
J