I want to find the difference between the below 2 times in hh:mm:ss format, can somebody please assist? 03/17/2016 11:45:05 2016-03-17 11:44:03.0

[ppanchal]

I want to find the difference between the below 2 times in hh:mm:ss format, can somebody please assist?

03/17/2016 11:45:05 2016-03-17 11:44:03.0

[lguinn2]

Easy. Assume that the two strings are in fields timeEarlier and timeLater

yoursearchhere...
| eval timeDiff = strptime(timeLater,"%x %X") - strptime(timeEarlier,"%x %X")
| eval timeDiff_formatted = tostring(timeDiff,"duration")