https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530543#M64237 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp;the time is an example I have multiple rows where the time differs.</P><P>&nbsp;</P><P>Ideally I would just like to add an extra field that displays in seconds</P><P>&nbsp;</P><P>example:</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;date&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; date2(new field)</P><P><SPAN>0 Days, 0 Hours, 26 Minutes&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1560</SPAN></P><P><SPAN>0 Days, 0 Hours, 27 Minutes&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1620</SPAN></P><P><SPAN>0 Days, 0 Hours, 26 Minutes&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1560</SPAN></P><P>&nbsp;</P><P>tia</P> Tue, 24 Nov 2020 09:29:05 GMT nathanluke86 2020-11-24T09:29:05Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530539#M64235 <P>Hi all,</P><P>I have a time format like&nbsp;<SPAN>13 Days, 8 Hours, 34 Minutes and need to convert to seconds so I can sort on a dashboard high to low.</SPAN></P><P><SPAN>I would like to keep the&nbsp;13 Days, 8 Hours, 34 Minutes format just need to add a field in seconds to sort by</SPAN></P> Tue, 24 Nov 2020 09:01:49 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530539#M64235 nathanluke86 2020-11-24T09:01:49Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530543#M64237 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp;the time is an example I have multiple rows where the time differs.</P><P>&nbsp;</P><P>Ideally I would just like to add an extra field that displays in seconds</P><P>&nbsp;</P><P>example:</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;date&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; date2(new field)</P><P><SPAN>0 Days, 0 Hours, 26 Minutes&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1560</SPAN></P><P><SPAN>0 Days, 0 Hours, 27 Minutes&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1620</SPAN></P><P><SPAN>0 Days, 0 Hours, 26 Minutes&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1560</SPAN></P><P>&nbsp;</P><P>tia</P> Tue, 24 Nov 2020 09:29:05 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530543#M64237 nathanluke86 2020-11-24T09:29:05Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530546#M64238 <LI-CODE lang="markup">| rex field=time "(?&lt;days&gt;\d+) Days, (?&lt;hours&gt;\d+) Hours, (?&lt;minutes&gt;\d+) Minutes" | eval seconds=((((days * 24) + hours) * 60) + minutes) * 60</LI-CODE> Tue, 24 Nov 2020 09:32:07 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530546#M64238 ITWhisperer 2020-11-24T09:32:07Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530549#M64239 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/192656">@nathanluke86</a>&nbsp;</P><LI-CODE lang="markup">| makeresults | eval date="13 Days, 8 Hours, 34 Minutes" | rex field=date "(?&lt;Days&gt;\d+)\s+Days\,\s+(?&lt;Hours&gt;\d+)\s+Hours\,\s+(?&lt;Minutes&gt;\d+)\s+Minutes" | eval seconds=(Days*86400)+(Hours*3600)+(Minutes*60) | fields - Days,Hours,Minutes</LI-CODE> Tue, 24 Nov 2020 09:40:49 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530549#M64239 thambisetty 2020-11-24T09:40:49Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530559#M64240 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/129407">@thambisetty</a>&nbsp;</P><P>Both of these work I just have 1 small issue as follows</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="nathanluke86_0-1606211791186.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/12033i56539128F9BC6A69/image-size/medium?v=v2&amp;px=400" role="button" title="nathanluke86_0-1606211791186.png" alt="nathanluke86_0-1606211791186.png" /></span></P><P>&nbsp;</P><P>won't display when:</P><P>1 hour NOT hours</P><P>1 Minute NOT Minutes.</P><P>1 day NOT days</P><P>Really grateful for the help so far guys</P> Tue, 24 Nov 2020 09:59:37 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530559#M64240 nathanluke86 2020-11-24T09:59:37Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530561#M64241 <LI-CODE lang="markup">| rex field=time "(?&lt;days&gt;\d+) Day(|s), (?&lt;hours&gt;\d+) Hour(|s), (?&lt;minutes&gt;\d+) Minute(|s)" | eval seconds=((((days * 24) + hours) * 60) + minutes) * 60</LI-CODE> Tue, 24 Nov 2020 10:03:16 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530561#M64241 ITWhisperer 2020-11-24T10:03:16Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530562#M64242 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp;Thankyou, works perfectly.</P> Tue, 24 Nov 2020 10:06:22 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Time-format-quot-13-Days-8-Hours-34-Minutes-quot-to-seconds-so-I/m-p/530562#M64242 nathanluke86 2020-11-24T10:06:22Z