Hi everyone ,
I would like to exclude a holiday list from my search using a lookup.csv .
how to do ? thanks all of you
| eval holiday =mvrange(strptime(insrt_date,"%Y-%m-%d"),strptime(updt_date,"%Y-%m-%d"),86400) | convert ctime(date) as dates timeformat="%A" | eval dates=mvfilter(NOT match(dates,"(Saturday|Sunday)")) | mvexpand date | search NOT [| inputlookup holiday.csv | eval datefield=strptime(datefield, "%Y-%m-%d") ]
Hi
Check this solution by @somesoni2
https://answers.splunk.com/answers/342238/excluding-holidays-and-weekends-a-count-of-days-wi.html
Hi
Check this solution by @somesoni2
https://answers.splunk.com/answers/342238/excluding-holidays-and-weekends-a-count-of-days-wi.html