Splunk Search

How is the duration calculated in the Transaction Command?

AntonioM
Explorer

Hello All,

I was wondering how is the duration field in the Transaction Command calculated? Is it based on each eventcount within that one transaction?

Thanks,
AntM

Tags (2)
0 Karma

gkanapathy
Splunk Employee
Splunk Employee

it's just the difference between the timestamps of the first event and the last event in the transaction.

AntonioM
Explorer

Thanks! Appreciate the help!

0 Karma

yannK
Splunk Employee
Splunk Employee

in seconds.
and if your transaction is not finished duration=0...

0 Karma
Get Updates on the Splunk Community!

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...

Data Management Digest – January 2026

Welcome to the January 2026 edition of Data Management Digest! Welcome to the January 2026 edition of Data ...