I would like to transform some date fields in my file when indexing:
basically my file is a csv one and one line event looks like this:
"","Value1","Value2","","","","20160326"...
I want to tranform my date like this
26/03/2016
I succeed with SEDCMD and this regex:
s/((.*?),){7}([0-9]{4})(0[1-9]|1[0-2])(0[1-9]|[1-2][0-9]|3[0-1]))/\1\5\/\4\/\3/
But, when I'm doing some search, field values in the window have the new date format, but have the old date format when I select field in the left column( with selected fields and interesting fields )
I guess I misunderstand something relating with index-time and search-time, like my modification is not persistent at search-time.
Anyone can help?
... View more