https://community.splunk.com/t5/Splunk-Search/Search-Language-variable-for-search-duration/m-p/29403#M5928 <P>You just saved my day dwaddle, thx</P> Tue, 07 May 2013 15:24:09 GMT chris 2013-05-07T15:24:09Z https://community.splunk.com/t5/Splunk-Search/Search-Language-variable-for-search-duration/m-p/29401#M5926 <P>Hello,<BR /> I was curious if there was a way to reference a search duration for use within the search? Primarily for use inside a dashboard. If the timepicker selects a 5 day duration then the search string could have a variable which would be the value from the timepicker in seconds (so for 5 days the value would be 432000 seconds). I'm not sure if this is possible without adding apps/custom modules.</P> <P>Thank you for any help!</P> Thu, 16 Jun 2011 15:50:41 GMT https://community.splunk.com/t5/Splunk-Search/Search-Language-variable-for-search-duration/m-p/29401#M5926 aputz 2011-06-16T15:50:41Z https://community.splunk.com/t5/Splunk-Search/Search-Language-variable-for-search-duration/m-p/29402#M5927 <P>Yes, using <CODE>addinfo</CODE> and <CODE>eval</CODE>. <CODE>addinfo</CODE> will add four time_t fields -- <CODE>info_min_time</CODE> and <CODE>info_max_time</CODE> being the useful ones for your purpose. Considering they are both time_t, duration is just a matter of arithmetic.</P> <PRE><CODE>my_search | addinfo | eval tpwindow=info_max_time - info_min_time </CODE></PRE> <P><A href="http://www.splunk.com/base/Documentation/latest/SearchReference/Addinfo" target="_blank">http://www.splunk.com/base/Documentation/latest/SearchReference/Addinfo</A></P> Mon, 28 Sep 2020 09:41:03 GMT https://community.splunk.com/t5/Splunk-Search/Search-Language-variable-for-search-duration/m-p/29402#M5927 dwaddle 2020-09-28T09:41:03Z https://community.splunk.com/t5/Splunk-Search/Search-Language-variable-for-search-duration/m-p/29403#M5928 <P>You just saved my day dwaddle, thx</P> Tue, 07 May 2013 15:24:09 GMT https://community.splunk.com/t5/Splunk-Search/Search-Language-variable-for-search-duration/m-p/29403#M5928 chris 2013-05-07T15:24:09Z