topic Time Range question in Dashboards & Visualizations

Time Range question

palisetty — Mon, 23 Dec 2019 09:43:01 GMT

I am new to Splunk, what is meant by "-1d@d+12h" in the time-range? Please explain

Re: Time Range question

vnravikumar — Mon, 23 Dec 2019 13:54:12 GMT

It represents yesterday at 12 pm. -1d@d - today -1(yesterday) @d+12h - 12 pm

Re: Time Range question

richgalloway — Mon, 23 Dec 2019 14:08:02 GMT

The Search Reference manual explains time modifiers. See https://docs.splunk.com/Documentation/Splunk/7.3.3/SearchReference/SearchTimeModifiers. In this example, the time range starts at noon yesterday (one day ago at 0:00 ("-1d@d") plus twelve hours ("+12h")).

Re: Time Range question

palisetty — Mon, 23 Dec 2019 14:19:30 GMT

Thank You. You mean, 1d@d = today.
-1d@d=yesterday?

Re: Time Range question

vnravikumar — Mon, 23 Dec 2019 14:21:55 GMT

@d today, -1d@d=yesterday

Re: Time Range question

palisetty — Mon, 23 Dec 2019 14:24:20 GMT

1d@d means? Please don't mind about asking silly questions. I am trying to make sure I get it.

Re: Time Range question

vnravikumar — Mon, 23 Dec 2019 14:27:02 GMT

1d@d - Invalid. If you prefix + +1d@d represents next day

Re: Time Range question

palisetty — Mon, 23 Dec 2019 14:28:41 GMT

Perfect. Thank You

Re: Time Range question

palisetty — Wed, 25 Dec 2019 07:17:36 GMT

Ravi -24h@h means?
@h is the current hour.
-24h means 24 hours of yesterday? I so, when is the start time?
Please correct me.

Re: Time Range question

vnravikumar — Wed, 25 Dec 2019 08:15:07 GMT

current time(hour) - 24 hours

Re: Time Range question

vnravikumar — Wed, 25 Dec 2019 08:20:18 GMT

you can check it by entering in the time range

Sample url

Re: Time Range question

palisetty — Wed, 25 Dec 2019 09:26:12 GMT

Thank you so much for your effort.
I entered +h@h and it is displaying at 3:30. The current time is 2:55. If @ is rounding off, it should round off to 4:00 right