How to find start time and end time for a transaction in Splunk?
Using max(), min() and strftime(), we can find start and end time for a transaction in Splunk. Sample Splunk Query: Your basic Search Query | stats max(_time) AS tempmax, min(_time) ....