https://community.splunk.com/t5/Splunk-Search/Difference-between-two-dates/m-p/85800#M21905 <P>For days you can do this:</P> <PRE><CODE>... | eval days = round((strptime(Enddate, "%F %T") - strptime(Startdate, "%F %T")) / 86400) </CODE></PRE> <P>For years it depends on what you want to see.</P> Fri, 05 Apr 2013 10:40:36 GMT martin_mueller 2013-04-05T10:40:36Z https://community.splunk.com/t5/Splunk-Search/Difference-between-two-dates/m-p/85799#M21904 <P>I have a log that has <BR /> Start date=2003-11-20 00:00:00,End date=2079-06-06 00:00:00.<BR /> I want to calculate the difference between the Enddate and Startdate, and display the difference in both days and in years.</P> <P>Please help me </P> Fri, 05 Apr 2013 10:17:38 GMT https://community.splunk.com/t5/Splunk-Search/Difference-between-two-dates/m-p/85799#M21904 ncbshiva 2013-04-05T10:17:38Z https://community.splunk.com/t5/Splunk-Search/Difference-between-two-dates/m-p/85800#M21905 <P>For days you can do this:</P> <PRE><CODE>... | eval days = round((strptime(Enddate, "%F %T") - strptime(Startdate, "%F %T")) / 86400) </CODE></PRE> <P>For years it depends on what you want to see.</P> Fri, 05 Apr 2013 10:40:36 GMT https://community.splunk.com/t5/Splunk-Search/Difference-between-two-dates/m-p/85800#M21905 martin_mueller 2013-04-05T10:40:36Z