https://community.splunk.com/t5/Getting-Data-In/quot-Calculating-the-difference-in-minutes-between-the-current/m-p/701880#M116131 <P>I'm trying to calculate the minute difference between two times<BR />and get an empty field</P><P>&nbsp;</P><LI-CODE lang="markup">.........base search here......... |end_time = 2024-09-24 08:17:13.014337+00:00 |eval end_time = strptime(end_time_epoch, "%Y:%m:%d %H:%M:%S") |eval _time = now() |eval time_epoch = strptime(time_epoch, "%Y:%m:%d %H:%M:%S") |eval diff = (time_epoch-end_time)/60</LI-CODE><P>&nbsp;</P> Tue, 15 Oct 2024 05:40:20 GMT Bracha 2024-10-15T05:40:20Z https://community.splunk.com/t5/Getting-Data-In/quot-Calculating-the-difference-in-minutes-between-the-current/m-p/701880#M116131 <P>I'm trying to calculate the minute difference between two times<BR />and get an empty field</P><P>&nbsp;</P><LI-CODE lang="markup">.........base search here......... |end_time = 2024-09-24 08:17:13.014337+00:00 |eval end_time = strptime(end_time_epoch, "%Y:%m:%d %H:%M:%S") |eval _time = now() |eval time_epoch = strptime(time_epoch, "%Y:%m:%d %H:%M:%S") |eval diff = (time_epoch-end_time)/60</LI-CODE><P>&nbsp;</P> Tue, 15 Oct 2024 05:40:20 GMT https://community.splunk.com/t5/Getting-Data-In/quot-Calculating-the-difference-in-minutes-between-the-current/m-p/701880#M116131 Bracha 2024-10-15T05:40:20Z https://community.splunk.com/t5/Getting-Data-In/quot-Calculating-the-difference-in-minutes-between-the-current/m-p/701882#M116132 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/262845">@Bracha</a>&nbsp;Pls check this:</P><LI-CODE lang="markup">| makeresults | eval end_time="2024-09-24 08:17:13.014337+00:00" |eval end_timeepoch = strptime(end_time, "%Y-%m-%d %H:%M:%S.%6Q+00:00") |eval _time = now() |eval diff = (end_timeepoch-_time)/60 | table end_time end_timeepoch _time diff</LI-CODE><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="inventsekar_0-1728972499048.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/33093iEEBCAC8F3ECD4E3D/image-size/medium?v=v2&amp;px=400" role="button" title="inventsekar_0-1728972499048.png" alt="inventsekar_0-1728972499048.png" /></span></P><P>&nbsp;</P> Tue, 15 Oct 2024 06:08:31 GMT https://community.splunk.com/t5/Getting-Data-In/quot-Calculating-the-difference-in-minutes-between-the-current/m-p/701882#M116132 inventsekar 2024-10-15T06:08:31Z https://community.splunk.com/t5/Getting-Data-In/quot-Calculating-the-difference-in-minutes-between-the-current/m-p/701885#M116133 <P>thanks&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/80737">@inventsekar</a>&nbsp;</P><P>it solved!</P> Tue, 15 Oct 2024 06:29:40 GMT https://community.splunk.com/t5/Getting-Data-In/quot-Calculating-the-difference-in-minutes-between-the-current/m-p/701885#M116133 Bracha 2024-10-15T06:29:40Z https://community.splunk.com/t5/Getting-Data-In/quot-Calculating-the-difference-in-minutes-between-the-current/m-p/701887#M116134 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/262845">@Bracha</a>&nbsp;could you pls accept it as solution, thanks.&nbsp;</P> Tue, 15 Oct 2024 06:31:48 GMT https://community.splunk.com/t5/Getting-Data-In/quot-Calculating-the-difference-in-minutes-between-the-current/m-p/701887#M116134 inventsekar 2024-10-15T06:31:48Z