topic Re: how to calculate the starttime and endtime between duration ? in Splunk Search https://community.splunk.com/t5/Splunk-Search/how-to-calculate-the-starttime-and-endtime-between-duration/m-p/450327#M173121 <P>ignore above comment <BR /> it's working</P> <P>thank you Chrisyongerjds</P> Sun, 10 Feb 2019 09:44:16 GMT babukumarreddy 2019-02-10T09:44:16Z how to calculate the starttime and endtime between duration ? https://community.splunk.com/t5/Splunk-Search/how-to-calculate-the-starttime-and-endtime-between-duration/m-p/450324#M173118 <P>actually iam new to splunk</P> <P>in my logs starttime and endtime is there need to calculate duration<BR /> starttime endtime<BR /> |01-feb-2019 01:30:18|01-feb-2019 01:30:28</P> <P>fieldnames are starttime and endtime</P> Sun, 10 Feb 2019 09:26:46 GMT https://community.splunk.com/t5/Splunk-Search/how-to-calculate-the-starttime-and-endtime-between-duration/m-p/450324#M173118 babukumarreddy 2019-02-10T09:26:46Z Re: how to calculate the starttime and endtime between duration ? https://community.splunk.com/t5/Splunk-Search/how-to-calculate-the-starttime-and-endtime-between-duration/m-p/450325#M173119 <P>Try this: <CODE>|eval d1 = strptime(starttime, "%d-%b-%Y %H:%M:%S") | eval d2 = strptime(endtime, "%d-%b-%Y %H:%M:%S") | eval duration_in_seconds = d1 - d2</CODE></P> <P>Hope this helps</P> Sun, 10 Feb 2019 09:34:25 GMT https://community.splunk.com/t5/Splunk-Search/how-to-calculate-the-starttime-and-endtime-between-duration/m-p/450325#M173119 chrisyounger 2019-02-10T09:34:25Z Re: how to calculate the starttime and endtime between duration ? https://community.splunk.com/t5/Splunk-Search/how-to-calculate-the-starttime-and-endtime-between-duration/m-p/450326#M173120 <P>Hi Chrisyongerjds</P> <P>its not working</P> <P>index="starttime"|eval d1 = strptime(starttime, "%d-%m-%Y %H:%M:%S") | eval d2 = strptime(endtime, "%d-%m-%Y %H:%M:%S") | eval duration_in_seconds = d1 - d2|table starttime endtime duration_in_seconds</P> Tue, 29 Sep 2020 23:07:43 GMT https://community.splunk.com/t5/Splunk-Search/how-to-calculate-the-starttime-and-endtime-between-duration/m-p/450326#M173120 babukumarreddy 2020-09-29T23:07:43Z Re: how to calculate the starttime and endtime between duration ? https://community.splunk.com/t5/Splunk-Search/how-to-calculate-the-starttime-and-endtime-between-duration/m-p/450327#M173121 <P>ignore above comment <BR /> it's working</P> <P>thank you Chrisyongerjds</P> Sun, 10 Feb 2019 09:44:16 GMT https://community.splunk.com/t5/Splunk-Search/how-to-calculate-the-starttime-and-endtime-between-duration/m-p/450327#M173121 babukumarreddy 2019-02-10T09:44:16Z