https://community.splunk.com/t5/Splunk-Search/How-to-calculate-number-of-days-between-the-beginning-of-the/m-p/233915#M69513 <P>are the dates you are calculating between values in fields? Are they the range from the time picker?</P> <P>If they are values in fields, it'd be as simple as <CODE>|eval daysBetween=round((time2-time1)/86400,0)</CODE> given that the time fields are in epoch, if not, you'll need to do some more evaling with either <CODE>strftime</CODE></P> <P>If the values are from the time picker, use </P> <PRE><CODE>|gentimes start=-1 | addinfo | dedup info_min_time info_max_time | eval daysBetween=round((info_max_time-info_min_time)/86400,2) </CODE></PRE> Tue, 10 Jan 2017 14:48:02 GMT cmerriman 2017-01-10T14:48:02Z https://community.splunk.com/t5/Splunk-Search/How-to-calculate-number-of-days-between-the-beginning-of-the/m-p/233914#M69512 <P>Let's say the date is 20th of feb, 2017. I need to calculate the number of days starting from 1st feb, 2017 till 20th feb, 2017 ie 20 days. How can I calculate this?</P> Tue, 10 Jan 2017 06:51:25 GMT https://community.splunk.com/t5/Splunk-Search/How-to-calculate-number-of-days-between-the-beginning-of-the/m-p/233914#M69512 ASISH_9 2017-01-10T06:51:25Z https://community.splunk.com/t5/Splunk-Search/How-to-calculate-number-of-days-between-the-beginning-of-the/m-p/233915#M69513 <P>are the dates you are calculating between values in fields? Are they the range from the time picker?</P> <P>If they are values in fields, it'd be as simple as <CODE>|eval daysBetween=round((time2-time1)/86400,0)</CODE> given that the time fields are in epoch, if not, you'll need to do some more evaling with either <CODE>strftime</CODE></P> <P>If the values are from the time picker, use </P> <PRE><CODE>|gentimes start=-1 | addinfo | dedup info_min_time info_max_time | eval daysBetween=round((info_max_time-info_min_time)/86400,2) </CODE></PRE> Tue, 10 Jan 2017 14:48:02 GMT https://community.splunk.com/t5/Splunk-Search/How-to-calculate-number-of-days-between-the-beginning-of-the/m-p/233915#M69513 cmerriman 2017-01-10T14:48:02Z https://community.splunk.com/t5/Splunk-Search/How-to-calculate-number-of-days-between-the-beginning-of-the/m-p/573657#M199913 <P>I have a report that runs every day and is doing calculations based on the number of days that have occurred so far.&nbsp; After pulling my hair out and using a variety of techniques posted in these forums, I ended up with:</P><P>| eventstats dc(date_mday) AS daysInMonth</P><P>Unless i'm mistaken, the date_* fields are automatically generated in splunk (at least all the data i've seen has them) and this was the easiest and most reliable method I found.</P> Thu, 04 Nov 2021 18:15:42 GMT https://community.splunk.com/t5/Splunk-Search/How-to-calculate-number-of-days-between-the-beginning-of-the/m-p/573657#M199913 sjbriggs 2021-11-04T18:15:42Z https://community.splunk.com/t5/Splunk-Search/How-to-calculate-number-of-days-between-the-beginning-of-the/m-p/573665#M199921 <P>Assuming you've a field "date" with format "%Y-%m-%d", you can do something like this (run anywhere sample, replace first two lines with your base search)</P><LI-CODE lang="markup">| makeresults | eval date="2017-02-20" | table date | eval startOfMonth=relative_time(strptime(date,"%Y-%m-%d"),"@mon") | eval noOfDays=round((strptime(date,"%Y-%m-%d")-startOfMonth)/86400+1)</LI-CODE> Thu, 04 Nov 2021 19:14:37 GMT https://community.splunk.com/t5/Splunk-Search/How-to-calculate-number-of-days-between-the-beginning-of-the/m-p/573665#M199921 somesoni2 2021-11-04T19:14:37Z