How do I calculate elapsed time between hours on t... - Splunk Community

Splunk Search

I have an Incident "Open Date" in following format DD/MM/YYYY HH:MM and an Incident "Close Date" in same format.

I want to calculate the amount of time between the two dates. However, I only want to calculate the hours between 09:00 and 17:00 on those dates.

Can any one advise?

Thanks

Can you check this answer , and modify accordingly?

https://answers.splunk.com/answers/620591/how-to-calculate-total-business-hours-in-between-w.html

Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...