Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

TIme value differnece in duration: getting value as 0d

$
0
0
HI All, I am able to get the time value difference in epoch and able to convert it to string with the following command:- eval LeadDays = ( Answer_Time - Bookingdate) | eval LeadDays = tostring(LeadDays, "duration") | Bookingdate Answer_Time LeadDays 1535635518.000000 1535708751.000000 20:20:33.000000 1535636031.000000 1536059535.000000 2+21:38:24.000000 the problem is in first row: is there a way to convert it to 0+20:20:33.000000 instead of 20:20:33.000000. I tried to use string concat but it didnt work. Also is there a way to convert 2+21:38:24 to only days as 2+21/24+38/3600= 2.88 days

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>