Splunk Search

In a table using CSV data, how do we add "waitdays" to date and show in new column ?

ibob0304
Communicator

I have CSV data like below,

---------------------------------------------------
Date1              |   WaitDays   
---------------------------------------------------
9/24/2018      | 20
8/28/2018      | 160
7/13/2018      | 01

How do we add the waitdays to date and show in new column ?

 | eval inputDate = relative_time(Date1, "%Y-%m-%d")
 | eval expiring = inputDate  + WaitDays
 | eval expiring = strftime(expiring, "%Y-%m-%d")

I tried this, but it is not working as expected.

0 Karma
1 Solution

Vijeta
Influencer

Hi,

You can use the below logic for date and waitdays conversion to seconds and then calculating exp date

eval date=strptime(Date1,"%m/%d/%Y")| eval wdays= WaitDays * 60 *24 * 60|eval exp= date + wdays| eval exp=strftime(exp,"%Y/%m/%d")

Thanks
Vijeta

View solution in original post

Vijeta
Influencer

Hi,

You can use the below logic for date and waitdays conversion to seconds and then calculating exp date

eval date=strptime(Date1,"%m/%d/%Y")| eval wdays= WaitDays * 60 *24 * 60|eval exp= date + wdays| eval exp=strftime(exp,"%Y/%m/%d")

Thanks
Vijeta

ibob0304
Communicator

Tried 60*24*60 and it worked.,

0 Karma

Vijeta
Influencer

yes sorry missed the * while typing

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...