How do I retrieve the time range from the alert script?

walterleunghk — Thu, 09 Apr 2015 04:20:25 GMT

Re: How do I retrieve the time range from the alert script?

woodcock — Tue, 29 Sep 2020 06:54:03 GMT

I am not sure what your context is but you should be able to get the search time range in any context by using addinfo (pipe this onto the end of your search) which will create these fields:

info_min_time=The earliest time boundary for the search.
info_max_time=The latest time boundary for the search.
info_sid=The ID of the search that generated the event.
info_search_time=The time when the search was run.

http://docs.splunk.com/Documentation/Splunk/6.2.5/SearchReference/addinfo

topic How do I retrieve the time range from the alert script? in Alerting

How do I retrieve the time range from the alert script?

Re: How do I retrieve the time range from the alert script?