To findout month and week from a Field

[kml_uvce]

I have a field like in this format 2012-02-11
This field is in many events with diffrent year-month-day.

I want to make a search in which I can extaract information wrt month and week from this field.
How I can do this

[Ayn · Accepted solution]

... | rex field=yourfield "(?<year>.+?)-(?<month>.+?)-(?<day>.+)"

Substitute yourfield with whatever your field is called.

[Ayn]

Excellent. Could you please mark my answer as accepted? Thanks!

[kml_uvce]

Thanks this works for me now...

[Ayn]

With all due respect: http://lmgtfy.com/?q=strftime

[kml_uvce]

I am not able to find out the complete doc for strftime, can you make this search ?

[Ayn]

Yes, using the same technique. Look up all strftime parameters, there are many different ones.

[kml_uvce]

cool it works , also is there any way to find month name also (jan ,feb etc) form search?

[Ayn]

Correcting myself - apparently strftime can handle this, using the %u (week starting on Monday) or %U (week starting on Sunday) parameter!

You could do something like this to get the week number:

eval week=strftime(strptime(yourfield,"%Y-%m-%d"),"%U")

[kml_uvce]

I mean to say that I want week number from this search so that I can make chart wrt week number

[Ayn]

Not easily done, as that will change from year to year. Your best bet would probably be to create a lookup file that maps dates to week numbers and use that.

[kml_uvce]

yes, its week number

[Ayn]

What do you mean by week, week number?

[kml_uvce]

ok it works for month , but how I can figure out about the week