こんにちは。 Timeline ビジュアライゼーションを使うと、もっと簡単にできます。 ご参考ください。 https://splunkbase.splunk.com/app/3120/ source="call_log.csv" index="call" sourcetype="csv" |eval LeaveTime_e=strptime(LeaveTime,"%Y-%m-%d %H:%M:%S") |eval JoinTime_e=strptime(JoinTime,"%Y-%m-%d %H:%M:%S") |eval duration=LeaveTime_e-JoinTime_e |eval duration=duration*1000 |table JoinTime_e, CallID, duration, duration ... View more

Koji, if you would like to setup the application I will be happy to help you. You just need to make sure that you have the api enable on your Vidyo Portal. The software will only work on Enterprise as we have to rely on DB Connect. Thanks, Stephen Robinson ... View more