Solved: calculate time during - Splunk Community

Splunk Search

this is my log

11:01:36 OUT: "cadstar_silver" changpeggy@T1-PCB-PEGGY

10:55:07 IN: "cadstar_silver" changpeggy@T1-PCB-PEGGY

How can I calculate this log time during ? Thanks.

1 Solution

Solution

Use transaction, use the duration field that it creates.

http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/Transaction

View solution in original post

Solution

Use transaction, use the duration field that it creates.

http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/Transaction

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Tiling

This puzzle (first published here) is based on finding groups of tessellated tiles (inspired by floor tiles I ...

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

Thursday, July 9, 2026 | 11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...

Upgrade Prep for 10.4, Network Observability Deep Dives, and More from Splunk Lantern

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...