https://community.splunk.com/t5/Splunk-Dev/Getting-error-Please-select-a-shorter-time-duration-for-your/m-p/680642#M11378 <P>Hi</P><P>have you check / asked it there is Splunk Workload management rules implemented for this search?</P><P>r. Ismo</P> Thu, 14 Mar 2024 06:58:38 GMT isoutamo 2024-03-14T06:58:38Z https://community.splunk.com/t5/Splunk-Dev/Getting-error-Please-select-a-shorter-time-duration-for-your/m-p/680640#M11377 <P><SPAN>I’ve been running into an issue with the Splunk query which have been using since long time and seeing the following error message: “Please select a shorter time duration for your query,” even when I’m using a 5-minute time range.</SPAN><BR /><SPAN>I noticed that this error seems to pop up when we use latest=now() in our queries to get the most recent data.</SPAN><SPAN>However, when I tried the same query with a specific time range, like earliest=-xxh@h latest=-xxh@h, it worked just fine.</SPAN><BR /><SPAN>Any ideas on why latest=now() might not be fetching results as expected? And if there is any resolution to working with latest=now()</SPAN></P> Thu, 14 Mar 2024 06:48:05 GMT https://community.splunk.com/t5/Splunk-Dev/Getting-error-Please-select-a-shorter-time-duration-for-your/m-p/680640#M11377 ayushipaul 2024-03-14T06:48:05Z https://community.splunk.com/t5/Splunk-Dev/Getting-error-Please-select-a-shorter-time-duration-for-your/m-p/680642#M11378 <P>Hi</P><P>have you check / asked it there is Splunk Workload management rules implemented for this search?</P><P>r. Ismo</P> Thu, 14 Mar 2024 06:58:38 GMT https://community.splunk.com/t5/Splunk-Dev/Getting-error-Please-select-a-shorter-time-duration-for-your/m-p/680642#M11378 isoutamo 2024-03-14T06:58:38Z