Splunk Search

change date format

ChetanArgekar
Explorer

HI,
I am receiving data from Solarwinds Server and it is in following format
November 27, 2019 8:34 AM
I need to convert it in to DD/MM/YYYY HH:MM format.
how to do this

Tags (1)
0 Karma

vnravikumar
Champion

Hi

Try this

| makeresults 
| eval test="November 27, 2019 8:34 PM" 
| eval result=strftime(strptime(test,"%B %d, %Y %I:%M %p"),"%d/%m/%Y %H:%M")
0 Karma

ChetanArgekar
Explorer

Thanks for help.
In worked

0 Karma

vnravikumar
Champion

Please accept the answer

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!