Splunk Search

Is there a function to get the week day from any given epoch time?

manus
Communicator

I know how to get the week day from raw events, the week day is stored in the field date_wday.
However, I wonder if there's a function to compute the week day from an epoch time, as I want to get it from a field on a table which doesn't come from a raw event _time.

Tags (4)
1 Solution

manus
Communicator

I once again replied to my own question... Maybe I shouldn't ask so quickly...

|eval date_wday=strftime(epochtime,"%w")

View solution in original post

aweitzman
Motivator

<search> | eval dayofweekshort=strftime(epochtime,"%a") | eval dayofweekfull=strftime(epochtime,"%A") | eval dayofweekasnumber=strftime(epochtime,"%w")

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Commontimeformatvariables

manus
Communicator

I once again replied to my own question... Maybe I shouldn't ask so quickly...

|eval date_wday=strftime(epochtime,"%w")

Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...