Need to extract Workweek from date

[shivareddysompa]

I have a date like 2020-06-08 06:39:49.0

I need to extract workweek from it.

Thanks in advance.

[to4kawa]

| makeresults 
| eval _raw="2020-06-08 06:39:49.0"
| eval time=strptime(_raw,"%F %T.%Q")
| eval weekday=strftime(time,"%w") ,day=strftime(time,"%d") ,month_first=strftime(relative_time(time,"@month"),"%w")
| eval weeks=if(month_first <= weekday,floor(day / 7) + 1,floor(day / 7))

I made this query because I thought it was the second week of the month.

What is workweek?

[bmunson_splunk]

I define WorkWeek as the week number in the year, so week 1 is the first week  in Jan and 52  is the last full week in Dec.

[bmunson_splunk]

You can use strftime to create the field.

| makeresults | eval WorkWeek = strftime(_time,"%U")