I have created  chart with date and end time I need to chart the end times but it doesnt work on visualisation    I need to put start datetime on the X axis  ( start date would be fine actually) and end datetime as the data points (Y axis)  Any help gratefully received  the word time and chart have revealed too many other issues in splunk base search  index=billing sourcetype=billing_invoice_poller HikariPool "Start completed." | bin _time span=1d as day | convert timeformat="%Y-%m-%d %H:%M:%S" ctime(_time) AS c_time | stats earliest(c_time) as Start_Time by day | appendcols [search index=billing sourcetype=billing_invoice_poller HikariPool "Shutdown completed." | bin _time span=1d as day | convert timeformat="%Y-%m-%d %H:%M:%S" ctime(_time) AS d_time | stats latest(d_time) as End_Time by day] | eval it = strptime(Start_Time, "%Y-%m-%d %H:%M:%S.%3N") | eval ot = strptime(End_Time, "%Y-%m-%d %H:%M:%S.%3N") | eval diff = tostring((ot - it), "duration") | eval diff1 = strptime(diff, "%H:%M:%S") | eval Total_Run_Time = strftime(diff1, "%H:%M:%S")|sort - Start_Time | table Start_Time, End_Time ... View more

Hi I need to Convert an #epoch time to #minutes any ideas please guys would be really grateful - Thanks ... View more

process_inst_id=258600,process_def_id=30,process_name=MIWrite,start_dt=08-OCT-2019-07:39:49,end_dt=,completed=N,running=Running,exe_period=1,avg_exe_period=1,status=GREEN host = rbm01.plus.netsourcetype = Crontab_SPL 08/10/2019 07:36:18.000 process_inst_id=258599,process_def_id=5010,process_name=PAYRESP_NORMAL,start_dt=08-OCT-2019-07:36:18,end_dt=08-OCT-2019-07:37:40,completed=Y,running=08-OCT-2019-07:37:40,exe_period=1,avg_exe_period=1,status=GREEN host = rbm01.plus.netsourcetype = Crontab_SPL Fields above coming up as "OTHER" when I use timechart oddly, anyone know why? index=asg "completed=" | timechart count by process_name ... View more