Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Invalid result in getting span between two dates

$
0
0
This code: | makeresults | eval StartTime = strptime("2018-01-01 00:00:00", "%Y-%m-%d %H:%M:%S") | eval EndTime = strptime("2018-01-01 00:10:00", "%Y-%m-%d %H:%M:%S") | eval Elapsed = EndTime - StartTime | fieldformat Elapsed = strftime(Elapsed, "%H:%M:%S") results to Elapsed=08:10:00 or eight hours and ten minutes, instead of just ten minutes. Would like to get some assistance on why this happens and how to fix. Thanks a lot!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>