topic help for doing difference between 2 dates in Splunk Enterprise

help for doing difference between 2 dates

jip31 — Mon, 20 Sep 2021 09:39:06 GMT

I need to calculate the duration difference between 2 dates and having the result in seconds

The field "Debut chargement Profile" correspond to the beginning and the field "Fin chargement Profile" correspond to the end

the timestamp format is the following :

13/09/2021 11:00:06,000

how to do this please?

ITWhisperer — Mon, 20 Sep 2021 09:54:26 GMT

| eval diff=strptime('Fin chargement Profile',"%d/%m/%Y %H:%M:%S,%Q")-strptime('Debut chargement Profile',"%d/%m/%Y %H:%M:%S,%Q")

jip31 — Mon, 20 Sep 2021 10:24:27 GMT

many thanks