Thank you so much, it works.   I really appreciate your kindness. ... View more

Really appreciate your kindness and timeliness. Like I said, today is my first day of using this resources and splunk environment. Now, I understand the function of "accept answer",  but nevertheless, I'd appreciate if you can assist on how to view the time difference by each ticket. Thanking you in anticipation of your response. ... View more

Thanks for your quick response. Although the query was able to calculate the difference but it grouped all the ticket into a single field. What I want is to calculate the difference for each ticket for a specified period. Thanks ... View more

Thanks Galloway, The query is not giving me expected result when exported to excel. What I am trying to achieve is the following, Ticket Number      Activity_Type    Time                                         Activity_Type                   Time                             Status 2222000022          Add Task        1/2/2020 15:12:45                  Resolve                 2/1/2020 12:12:12          Closed I want to be able to calculate the time difference between when the Task is added and when it is resolved.   Thanks ... View more