Hi all, We are trying to calculate SLA from Jira logs in our Splunk. What we want to achieve to calculate the time between Team field changes for a specific ticket. Our current and expected log results  are as below. Current: Time Team Ticket No 09/12/2020 08:22 Level 3 Ticket 1 08/12/2020 06:08 Level 2  Ticket 1 08/12/2020 04:08 Level 1 Ticket 1 09/12/2020 16:22 Level 3 Ticket 2 08/12/2020 12:08 Level 2  Ticket 2 08/12/2020 10:08 Level 1 Ticket 2   Expected: Ticket No Transition Time Ticket 1 Level 1 to Level 2 2 hours Ticket 1 Level  2 to level 3 2 hours,14 mins Ticket 2 Level 1 to Level 2 3 hours Ticket 2 Level  2 to level 3 2 hours,20 mins   I hope I explained clearly. Any help is really appreciated, thank you! ... View more