hello guys,
I have two extracted fields which are DateTimeStart
and DateTimeEnd
So I get the minimum time started and the maximum time ended by the field jobname
|stats min(DateTimeStart) as DateTimeStart max(DateTimeEnd) as DateTimeEnd by jobname
For example:
My min time for start is DateTimeStart: 03/24/2015 06:00:35
and for the max end time i have here DateTimeEnd: 03/24/2015 06:15:03
So my question is, how to get the duration and with the format Hours:Minutes:Seconds
Thanks guys :">
i already figured it out.
|convert mktime(DateTimeStart) as dtstart mktime(DateTimeEnd) as dtend
|eval dur=(dtend-dtstart)
|eval myduration=tostring(dur,"duration")
hope this helps you as well! 🙂
Cheers!
i already figured it out.
|convert mktime(DateTimeStart) as dtstart mktime(DateTimeEnd) as dtend
|eval dur=(dtend-dtstart)
|eval myduration=tostring(dur,"duration")
hope this helps you as well! 🙂
Cheers!