This also works if window=2 is included on the streamstats | makeresults | eval _raw="ID vehicle patent Date Time 63 LXHH63 1/7/2021 5:24:12 73 LXHH63 1/7/2021 12:07:05 76 LXHH63 1/7/2021 14:43:57 79 LXHH63 1/7/2021 16:49:49 85 LXHH63 1/7/2021 18:56:31 86 LXHH63 1/7/2021 22:07:51" | multikv forceheader=1 | eval epoch=strptime(Date."T".Time,"%m/%d/%YT%H:%M:%S") | streamstats window=2 range(epoch) as Diff | eval Diff=round(Diff,0) | fieldformat Diff=tostring(Diff,"duration") | table ID vehicle_patent Date Time Diff   ... View more