again i wanted to list difference in dates between two periods and i have this code
| eval LPD = strptime(LastPickupDate, "%m-%d-%Y %H:%M:%S")
| eval IInT = strptime(IIT, "%m-%d-%Y %H:%M:%S")
| eval diff = (IInT-LPD)/86400
| stats list(diff) by FacilityName
still getting blanks
Hi @ositaumeozulu,
let me understand: in each event you have LastPickupDate and IIT in those formats and FacilityName, is this correct?
Check if you have all the three fields in each event and check the date formats.
Ciao.
Giuseppe
Hi @gcusello
Many thanks, has gotten the hang of it, for the format i was using - instead of / as in my format, thanks for all your helps, the whole codes are working now
Hi @ositaumeozulu,
good for you, see next time!
Please accept one answer for the other people of Community
Ciao and happy splunking
Giuseppe
P.S.: Karma Points are appreciated 😉