Hello, what must I do to report only values of diff_min greater than e.g. 1 endTime startTime | eval ET=strptime(endTime,"%Y-%m-%d %H:%M:%S.%3Q") | eval ST=strptime(startTime,"%Y-%m-%d %H:%M:%S.%3Q") | eval diff_min=(ET-ST)/60 | fields diff_min startTime endTime | sort -diff_min Sorry, it's my first dashboard. Thank you 🙂 Steff
... View more