topic How to search the average time between two timestamps? in Getting Data In

How to search the average time between two timestamps?

vrmandadi — Tue, 10 May 2016 21:26:24 GMT

Hello,

I am trying to find the difference between two time stamps using the below search:

index=abc | eval average_response_time = strptime(response, "%d-%m-%Y T%H:%M:%S.%3N") - strptime(request, "%d-%m-%Y T%H:%M:%S.%3N")

I have attached the screen shot of it which has request and response..I want to calculate the time difference between them.

Thanks in advance

somesoni2 — Tue, 10 May 2016 21:37:10 GMT

The timeformat should be "%d-%b-%Y %H:%M:%S.%3N"

woodcock — Tue, 10 May 2016 22:02:57 GMT

Try ending like this instead:

... | eval average_response_time = tostring((strptime(response, "%d-%b-%Y %H:%M:%S.%3N") - strptime(request, "%d-%b-%Y %H:%M:%S.%3N") ), "duration")

vrmandadi — Tue, 10 May 2016 22:31:28 GMT

thanks Somesh