how to exclude a holiday from search splunk using lookup csv

[ruben993]

Hi everyone ,
I would like to exclude a holiday list from my search using a lookup.csv .

how to do ? thanks all of you

| eval holiday =mvrange(strptime(insrt_date,"%Y-%m-%d"),strptime(updt_date,"%Y-%m-%d"),86400) | convert ctime(date) as dates timeformat="%A" | eval dates=mvfilter(NOT match(dates,"(Saturday|Sunday)")) | mvexpand date | search NOT [| inputlookup holiday.csv | eval datefield=strptime(datefield, "%Y-%m-%d") ]

[vnravikumar · Accepted solution]

Hi

Check this solution by @somesoni2

https://answers.splunk.com/answers/342238/excluding-holidays-and-weekends-a-count-of-days-wi.html