Dashboards & Visualizations

How to convert 3-16:30:19 to minutes.

revathiram
Engager

Please help to convert  ELAPSED of format 3-16:30:19  (3days-16hours:30m:19s) to minutes.

ITWhisperer
SplunkTrust
SplunkTrust
| rex field=ELAPSED "(?<days>\d+)-(?<hours>\d+):(?<minutes>\d+):"
| eval elapsetime=(days * 60 * 24) + (hours * 60) + minutes

This assumes for less than a day you will still get a zero at the beginning

Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...