Solved: calculate time during - Splunk Community

Splunk Search

this is my log

11:01:36 OUT: "cadstar_silver" changpeggy@T1-PCB-PEGGY

10:55:07 IN: "cadstar_silver" changpeggy@T1-PCB-PEGGY

How can I calculate this log time during ? Thanks.

1 Solution

Solution

Use transaction, use the duration field that it creates.

http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/Transaction

View solution in original post

Solution

Use transaction, use the duration field that it creates.

http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/Transaction

Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open! conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor. HEC Receiver authorization ...