CJA - Time between events

[KirkBe1]

New to CJA but this seems like it should be straightforward. (always does)

What to create two derived fields and then use those in a Date Math function to figureout the delta time between them. 

I have defined both of the derived fields and when used in a report bring back expected data. 

Issue comes in when I try and used those two derived fields to create a new derived feild. 

System says the first and second rule are not referanced in final output. 

But I can't 'see' the option to select them in the Date Math operator. 

[Jennifer_Dungan]

I don't have CJA, but your approach looks logical to me... 

I will try and see if I can find someone more familiar with CJA derived fields to help.

[KirkBe1]

Thank you . 

[blasta86794993]

Hi @KirkBe1 !

I can't seem to recreate the issue on my end, my first thought was that the derived fields you are using are the wrong data format. When I use the Timestamp from Event Datasets, I don't see the "event" scope option on the date math function, only session and person. Does it work when you change the scope on that date-math function to "session"?

 

[AnitaMummert]

oops, I logged in on the wrong account to post this reply!

[JoshuaSt2]

@KirkBe1 I believe the scope is what's causing your issue as mentioned above. If you change to session or person you should be able to see your earlier rules.

With event scope however, only limited options appear. At one point I attempted to calculate a delta between the event timestamp and the data capture time (as populated by Edge/data stream upon ingestion) and wasn't able to do so at the event scope.

[KirkBe1 · Accepted solution]

Thank you all. Figured it out. It was user error. 

I was using the custom timestamp and should have been using the event timestamp. 

Use the second one here, not the first one. 

[Jennifer_Dungan]

Glad you figured it out!