Refine your search:

how can i change the format of time in timechart Default format is : March 12th Sat

i need : 3/12/Sat

asked 14 Apr '11, 12:48

geetanjali's gravatar image

geetanjali
617322
accept rate: 0%


One Answer:

Yes, you can, read more in Specify timestamp display format for timechart axis labels on Splunk Answers

For me, Ron Naken tip worked.

Read this for more about date format info: http://docs.splunk.com/Documentation/Splunk/5.0.1/SearchReference/Commontimeformatvariables

Use something like above to get your "3/12/Sat" format:

... | rename _time AS Time | eval Time=strftime(Time, "%m/%d/%A")

I hope this can help you!

link

answered 24 Jan '13, 10:02

alvaromoraes's gravatar image

alvaromoraes
313
accept rate: 0%

edited 24 Jan '13, 10:03

Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×2,639

Asked: 14 Apr '11, 12:48

Seen: 1,479 times

Last updated: 24 Jan '13, 10:03

Copyright © 2005-2014 Splunk Inc. All rights reserved.