<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Can you help me SNAP to the nearest 30min? in Deployment Architecture</title>
    <link>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411972#M21255</link>
    <description>&lt;P&gt;Is there a way i can do this on the time range picker&lt;/P&gt;</description>
    <pubDate>Tue, 27 Nov 2018 03:55:54 GMT</pubDate>
    <dc:creator>jadengoho</dc:creator>
    <dc:date>2018-11-27T03:55:54Z</dc:date>
    <item>
      <title>Can you help me SNAP to the nearest 30min?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411968#M21251</link>
      <description>&lt;P&gt;Hi all , &lt;/P&gt;

&lt;P&gt;I basically want to snap my time to the nearest 30 min.  Like round of the the 30min.&lt;/P&gt;

&lt;P&gt;Example :&lt;BR /&gt;
1) TIME_NOW = 12:45 , earlier 30min is &lt;STRONG&gt;12:30&lt;/STRONG&gt; &lt;BR /&gt;
2) TIME_NOW= 12:59 ,  earlier 30min is &lt;STRONG&gt;12:30&lt;/STRONG&gt;&lt;BR /&gt;
3) TIME_NOW = 1:01 ,   earlier 30min is &lt;STRONG&gt;1:00&lt;/STRONG&gt;&lt;/P&gt;

&lt;P&gt;thanks in advance&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 22:11:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411968#M21251</guid>
      <dc:creator>jadengoho</dc:creator>
      <dc:date>2020-09-29T22:11:53Z</dc:date>
    </item>
    <item>
      <title>Re: Can you help me SNAP to the nearest 30min?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411969#M21252</link>
      <description>&lt;P&gt;I converted it into time and used BIN.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| makeresults |eval TIME_NOW = "12:45"
| append [| makeresults |eval TIME_NOW = "12:55"]
| append [| makeresults |eval TIME_NOW = "13:01"]
| eval TIME_NOW=strptime(TIME_NOW,"%H:%M")
| bin TIME_NOW span=30m|stats count by TIME_NOW
| eval TIME_NOW=strftime(TIME_NOW,"%H:%M")
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 27 Nov 2018 02:17:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411969#M21252</guid>
      <dc:creator>HiroshiSatoh</dc:creator>
      <dc:date>2018-11-27T02:17:28Z</dc:date>
    </item>
    <item>
      <title>Re: Can you help me SNAP to the nearest 30min?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411970#M21253</link>
      <description>&lt;P&gt;Just add this to your search:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;... | bucket TIME_NOW span=30m@m
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 27 Nov 2018 03:08:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411970#M21253</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2018-11-27T03:08:21Z</dc:date>
    </item>
    <item>
      <title>Re: Can you help me SNAP to the nearest 30min?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411971#M21254</link>
      <description>&lt;P&gt;HI, woodcock and Hiroshi Satoh,&lt;BR /&gt;
I have tried it on doing on a query But I will be needing this on the time picker advance option.&lt;BR /&gt;
Cause I will use it on both dashboard panel and save search settings.&lt;BR /&gt;
&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/6168i26E4A2ED04CFB445/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 27 Nov 2018 03:55:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411971#M21254</guid>
      <dc:creator>jadengoho</dc:creator>
      <dc:date>2018-11-27T03:55:15Z</dc:date>
    </item>
    <item>
      <title>Re: Can you help me SNAP to the nearest 30min?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411972#M21255</link>
      <description>&lt;P&gt;Is there a way i can do this on the time range picker&lt;/P&gt;</description>
      <pubDate>Tue, 27 Nov 2018 03:55:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411972#M21255</guid>
      <dc:creator>jadengoho</dc:creator>
      <dc:date>2018-11-27T03:55:54Z</dc:date>
    </item>
    <item>
      <title>Re: Can you help me SNAP to the nearest 30min?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411973#M21256</link>
      <description>&lt;P&gt;I have no idea what you mean.&lt;/P&gt;</description>
      <pubDate>Tue, 27 Nov 2018 05:26:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411973#M21256</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2018-11-27T05:26:45Z</dc:date>
    </item>
    <item>
      <title>Re: Can you help me SNAP to the nearest 30min?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411974#M21257</link>
      <description>&lt;P&gt;i just want to round of the  time now to the earliest 30min,&lt;BR /&gt;
example the time now is 12:45, the time that it will get is 12:30.&lt;/P&gt;

&lt;P&gt;can this be done on the time range picker itself &lt;/P&gt;</description>
      <pubDate>Tue, 27 Nov 2018 07:02:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Can-you-help-me-SNAP-to-the-nearest-30min/m-p/411974#M21257</guid>
      <dc:creator>jadengoho</dc:creator>
      <dc:date>2018-11-27T07:02:59Z</dc:date>
    </item>
  </channel>
</rss>

