epoch time

[smahuja]

I want the difference between two timestamps in epoch.

My fields are like:

target.received.end.timestamp

1597115254203

target.received.start.timestamp

1597115254203

So need the difference between end and start timestamp.

Any help would be helpful.

Thanks

[to4kawa]

|eval diff = target.received.end.timestamp - target.received.start.timestamp 

[isoutamo]

And in human readable format

| eval diffHuman = tostring(diff, “duration”)

r. Ismo