How to find the duration in minutes between two events from _time ?
index=log-13120-nonprod-c laas_appId=qbmp.prediction* "pushed to greenplum for predictionId"
2022-05-19 03:37:30,108 jobRunStats INFO Current Predictions, total=1659262 pushed to greenplum for predictionId = fe387967-2f11-4358-8b27-c51a45042e79
2022-05-19 03:26:29,085 jobRunStats INFO Current Predictions, total=1659262 pushed to greenplum for predictionId = 473866d5-c7b1-4156-90a0-de978b260e8d
| sort 0 _time
| streamstats window=2 range(_time) as timediff
| eval timediffmins=timediff/60
| sort 0 _time
| streamstats window=2 range(_time) as timediff
| eval timediffmins=timediff/60
Yes this works ! Many thanks