Splunk Search

change date format

ChetanArgekar
Explorer

HI,
I am receiving data from Solarwinds Server and it is in following format
November 27, 2019 8:34 AM
I need to convert it in to DD/MM/YYYY HH:MM format.
how to do this

Tags (1)
0 Karma

vnravikumar
Champion

Hi

Try this

| makeresults 
| eval test="November 27, 2019 8:34 PM" 
| eval result=strftime(strptime(test,"%B %d, %Y %I:%M %p"),"%d/%m/%Y %H:%M")
0 Karma

ChetanArgekar
Explorer

Thanks for help.
In worked

0 Karma

vnravikumar
Champion

Please accept the answer

0 Karma
Get Updates on the Splunk Community!

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...