topic Re: How to display time parameters (start time, end time, total duration) of a transaction? in Splunk Search

How to display time parameters (start time, end time, total duration) of a transaction?

hemanath_ofc — Mon, 28 Sep 2020 17:58:38 GMT

10/21/14 13:17:08.747 SERIAL ZPIMXTerminal.Send Start
10/21/14 13:17:08.747 SERIAL SerialComClass:**NOTICE: Serial Port cleared OK
10/21/14 13:17:08.809 **SERIAL GetAckNak Sent: [00]
10/21/14 13:17:08.840 WLL-EX CCTX_POS_GET_TenderTypeStatus = 0

10/21/14 13:17:08.919 SERIAL SerialComClass:****NOTICE: Serial Port cleared OK
10/21/14 13:17:08.919 SERIAL Send Msg() >
10/21/14 13:17:08.981 SERIAL GetAckNak Recv: [00]

10/21/14 13:17:09.090 WLL-EX CCTX_OS_GET_TypeStatus = 0

10/21/14 13:17:09.090 SERIAL SerialComClass:**NOTICE: Serial Port cleared OK
10/21/14 13:17:09.153 **SERIAL GetAckNak Recv: [00]
10/21/14 13:17:09.262 SERIAL SerialComClass:****NOTICE: Serial Port cleared OK
10/21/14 13:17:08.747 SERIAL ZPIMXTerminal.Send Start

in above log.. i formed a transaction using "transaction startswith="ZPIMXTerminal.Send Start" endswith="ZPIMXTerminal.Send Start"

but I'm not sure how to display time parameters. I would like to see start time of transaction, end time of transaction and total duration. Along with that, I wanted to display the start and end time of "GetAckNak " in a table. Can anyone help?

Re: How to display time parameters (start time, end time, total duration) of a transaction?

vasanthmss — Mon, 28 Sep 2020 17:58:41 GMT

transaction startswith="ZPIMXTerminal.Send Start" endswith="ZPIMXTerminal.Send Start"|eval starttime=_time|eval endtime=_time+duration

If you want to convert time to human readable format use this
|convert ctime(starttime) ctime(endtime)

Re: How to display time parameters (start time, end time, total duration) of a transaction?

hemanath_ofc — Fri, 31 Oct 2014 06:03:58 GMT

Thanks Vasanth..

But can i find the duration of different event within a transaction.

for expample : time between
SERIAL GetAckNak Sent: [00]

SERIAL GetAckNak Recv: [00]

Re: How to display time parameters (start time, end time, total duration) of a transaction?

vasanthmss — Wed, 19 Nov 2014 00:40:20 GMT

Add a transaction command next to earlier one based on your req.

Re: How to display time parameters (start time, end time, total duration) of a transaction?

vasanthmss — Fri, 12 Dec 2014 18:39:27 GMT

Is it working?