index=_internal | eval Mahesh=replace(date, "^(\d{1,2})/(\d{1,2})/", "\2/\1/")
My date 03-16-2018 I need 16-03-2018
I notice that your sample dates have dashes, while your attempted regex uses slashes. How about this:
index=_internal
| eval Mahesh=replace(date, "^(\d{1,2})-(\d{1,2})-", "\2/-1-")
Thanks It did work but small correction, below correct syntex.
index=_internal | eval Mahesh=replace(Date, "^(\d{1,2})-(\d{1,2})-"," \2-\1-")
I notice that your sample dates have dashes, while your attempted regex uses slashes. How about this:
index=_internal
| eval Mahesh=replace(date, "^(\d{1,2})-(\d{1,2})-", "\2/-1-")