https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17287#M2173 <P>What sourcetype are you searching?</P> Tue, 13 Jul 2010 21:10:15 GMT lguinn2 2010-07-13T21:10:15Z https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17285#M2171 <P>im doing a username search and i want two fields in my results table to be the time the user sarted the connection and also when they disconnected the session to the network. What is this information classified as, and wat field would it be called?</P> <P>thanks</P> <P>happy splunking</P> <P>blake</P> Tue, 13 Jul 2010 19:07:42 GMT https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17285#M2171 riderofyamaha 2010-07-13T19:07:42Z https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17286#M2172 <P>so people will click minus one but cant answer a simple question. This site really is disappointing me</P> Tue, 13 Jul 2010 20:55:52 GMT https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17286#M2172 riderofyamaha 2010-07-13T20:55:52Z https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17287#M2173 <P>What sourcetype are you searching?</P> Tue, 13 Jul 2010 21:10:15 GMT https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17287#M2173 lguinn2 2010-07-13T21:10:15Z https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17288#M2174 <P>The problem is there is not enough information to help you with your question. What are type of system are they connecting to? Unix, Windows... </P> <P>Also have you had a chance to go through the knowledgebase? </P> <P><A href="http://www.splunk.com/base/Documentation/latest/User/HowSearchCommandsWork">http://www.splunk.com/base/Documentation/latest/User/HowSearchCommandsWork</A></P> <P><A href="http://www.splunk.com/base/Documentation/4.1.3/Knowledge/Aboutfields">http://www.splunk.com/base/Documentation/4.1.3/Knowledge/Aboutfields</A></P> <P><A href="http://www.splunk.com/base/Documentation/latest/User/SearchExamples">http://www.splunk.com/base/Documentation/latest/User/SearchExamples</A></P> <P>Here a few that may help. </P> <P>Travis.</P> Tue, 13 Jul 2010 21:41:34 GMT https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17288#M2174 thall79 2010-07-13T21:41:34Z https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17289#M2175 <P>im searching sys logs, on a windows system....ive also read through the documentation text with no success so far. I want to show a connection start and end time in a form search results field</P> Tue, 13 Jul 2010 22:05:33 GMT https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17289#M2175 riderofyamaha 2010-07-13T22:05:33Z https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17290#M2176 <P>???????????????</P> Wed, 14 Jul 2010 22:15:58 GMT https://community.splunk.com/t5/Getting-Data-In/time-start-and-time-end/m-p/17290#M2176 riderofyamaha 2010-07-14T22:15:58Z