Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

evaluate if date field dd/mm is older than 5 working days.

$
0
0
I have case such as : if date is older than 5 working (eg if today is Thursday 19th, then anything older than Thursday 12th), update the Feedback column with ‘resolution needs chase’ I have field extacted and converted by this code : |eval testTime = strptime('VTN_field_2',"%d/%m") |eval testTime2=(strftime('testTime',"%d/%m")) which gives epoch date testTime : e.g 1512498600.000000 1512498600.000000 and testTime2 e.g 01/12 06/12

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>