Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Evicted transaction duration and strptime() unable to process token of form input

$
0
0
I'm building a form with a time picker, and the output should go to a timerange visualizer based on events grouped into transactions. I'm trying to include transactions on the chart which are evicted ( `keepevicted=true`) I'm trying to achieve this with adding | eval durationms = (if(closed_txn == 0, strptime($timerange.latest$, "%s") - strptime(_time, "%s"), duration) * 1000) However `$timerange.latest$` may aquire really odd values, like `now`, which is not recognized by `strptime()`. So it is basically working with fixed time only. Any suggestions?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>