I had the same issue when trying to parse a date string from an input lookup. The following worked for me based on your example. index="dor_test" source="filename.csv" | convert mktime(Date) as Date timeformat="%m/%d/%Y" | eval Date=strftime(Date,"%m/%d/%Y") Please note that the timeformat needs to match the incoming format. e.g. 4/2/2018 = "%m/%d/%Y" 4/2/18 = "%m/%d/%y" Hope that helps. ... View more