title: Query for calculating duration between two different logs in Splunk
body: <p>As part of my requirements, I have to calculate the duration between two different logs using Splunk query.
  For example:</p>
  
  <p><strong>Log 2:</strong>
      <em>2020-04-22 13:12  ADD request received ID : 123</em></p>
  
  <p><strong>Log 1 :</strong>
      <em>2020-04-22 12:12  REMOVE request received ID : 122</em></p>
  
  <p>The common String between two logs is " request received ID :" and unique strings between two logs are "ADD", "REMOVE". And the expected output duration is 1 hour.</p>
  
  <p>Any help would be appreciated. Thanks</p>