Splunk: addinfo – getting start time and end time from your search