cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
saurabhbdwj
Engager
Member since: ‎06-01-2022
‎06-02-2022
Community Statistics
Posts 2
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎06-01-2022
View All

Re: How to correct the time in the "elapsed_Time" ...

by in Splunk Search
‎06-02-2022 12:20 AM
‎06-02-2022 12:20 AM
Hi @gcusello  This works exactly the way i want. Thank you for you help. ... View more

How to correct the time in the "elapsed_Time" fiel...

by in Splunk Search
‎06-01-2022 10:18 PM
‎06-01-2022 10:18 PM
index="SOMETHING"  earliest=-30d@d | stats earliest(_time) as action_StartTime latest(_time) as action_EndTime | eval elapsed_Time= action_EndTime - action_StartTime | convert ctime(action_StartTime) ctime(action_EndTime) ctime(elapsed_Time) | fields + action_StartTime action_EndTime elapsed_Time  | sort by action_StartTime The elapsed_Time is wrong, how can i make it correct? ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎06-02-2022 04:37 AM
Karma given to
View All