About murat89

murat89 · ‎03-04-2018

I have never created a field in Splunk, I know how to create an event type, a field seems little different to me.

murat89 · ‎02-28-2018

Thank you, great solution, i really appreciate that. Unfortunately there is no conference_id but we do have the conference name, here it is "Terminal 1". How to do with that?

murat89 · ‎02-27-2018

Hi guys, im a beginner in Splunk and my issue is that I have Cisco logs and I need to find out the conference duration but there is no field like duration so I have to make it through timestamps. Below you can see that kind of log and I don't know how to get the timestamps and then calculate the difference between them, please help, im thankful for any idea. Just a part of Cisco log: 2814 2018/01/22 09:56:39.008 APP Info conference "Terminal 1" created 2846 2018/01/22 12:01:30.213 APP Info conference "Terminal 1": deleted via API (no participants)

Posts	3
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎02-27-2018

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

How to calculate the difference between two timest...

Re: How to calculate the difference between two ti...

Re: How to calculate the difference between two ti...

How to calculate the difference between two timest...