Splunk Search

How to generate a Month-Year Series with 3 months interval ?

promukh
Path Finder

Hello Experts,

I need to generate a series of values in the form of Year-Month to part of the drop down list in the Panel

I was trying the below but it only generates the data for 1 Month 

|makeresults  | eval month = strftime(relative_time(now(), "+3mon@mon"), "%B %Y")  | return $month

Jan 2021

 

Expected Ouput :

Jan 2021

April 2021

JULY 2021

 

 

 

 

Labels (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Try this

| makeresults 
| eval month = strftime(relative_time(now(),"@mon"), "%B %Y"), month2 = strftime(relative_time(now(),"-1mon@mon"), "%B %Y"), month3 = strftime(relative_time(now(),"-2mon@mon"), "%B %Y") 
| eval month=mvappend(month3,month2,month)
| mvexpand month
| fields + month | fields - _time
---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...