https://community.splunk.com/t5/Splunk-Enterprise/Saved-search-going-back-to-1970-why/m-p/660363#M17585 <P>Hi</P><P>Thanks, we will try this, just one thing to mention, this is happening on one install and working on another install. Both have the same Spunk version 9.0.1.</P><P>Regards</P><P>Robert&nbsp;</P> Wed, 11 Oct 2023 09:07:14 GMT robertlynch2020 2023-10-11T09:07:14Z https://community.splunk.com/t5/Splunk-Enterprise/Saved-search-going-back-to-1970-why/m-p/660259#M17582 <P>Hi&nbsp;</P><P>Why is my saved search going back to 1970?</P><P>I have run the following savedsearch (screenshot below) and I am passing in 30 minutes (In yellow below).</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="robertlynch2020_0-1696956199801.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/27509i6C52BFD872EE216B/image-size/medium?v=v2&amp;px=400" role="button" title="robertlynch2020_0-1696956199801.png" alt="robertlynch2020_0-1696956199801.png" /></span></P><P>Saved search is set to 30 minutes.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="robertlynch2020_1-1696956232528.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/27510i2F54937AFFFB23F0/image-size/medium?v=v2&amp;px=400" role="button" title="robertlynch2020_1-1696956232528.png" alt="robertlynch2020_1-1696956232528.png" /></span></P><P>Thanks in advance</P><P>Robbie</P><P>&nbsp;</P> Tue, 10 Oct 2023 16:47:35 GMT https://community.splunk.com/t5/Splunk-Enterprise/Saved-search-going-back-to-1970-why/m-p/660259#M17582 robertlynch2020 2023-10-10T16:47:35Z https://community.splunk.com/t5/Splunk-Enterprise/Saved-search-going-back-to-1970-why/m-p/660261#M17583 <P>Try <A href="mailto:-30m@m" target="_blank">-30m@m</A></P><P>-30m on its own is probably a negative number so it is rounded to the nearest non-negative i.e. zero which in epoch time is the beginning of 1970.</P> Tue, 10 Oct 2023 17:06:57 GMT https://community.splunk.com/t5/Splunk-Enterprise/Saved-search-going-back-to-1970-why/m-p/660261#M17583 ITWhisperer 2023-10-10T17:06:57Z https://community.splunk.com/t5/Splunk-Enterprise/Saved-search-going-back-to-1970-why/m-p/660363#M17585 <P>Hi</P><P>Thanks, we will try this, just one thing to mention, this is happening on one install and working on another install. Both have the same Spunk version 9.0.1.</P><P>Regards</P><P>Robert&nbsp;</P> Wed, 11 Oct 2023 09:07:14 GMT https://community.splunk.com/t5/Splunk-Enterprise/Saved-search-going-back-to-1970-why/m-p/660363#M17585 robertlynch2020 2023-10-11T09:07:14Z