https://community.splunk.com/t5/Reporting/Scheduling-search-how-to-snap-to-current-hour-for-now/m-p/86225#M1947 <P>I'm scheduling a search that spans -1h@h and ends -@h, however the UI doesn't like my syntax:</P> <P>Cannot parse time argument 'dispatch.latest_time': '-@h'</P> Wed, 10 Oct 2012 16:13:33 GMT the_wolverine 2012-10-10T16:13:33Z https://community.splunk.com/t5/Reporting/Scheduling-search-how-to-snap-to-current-hour-for-now/m-p/86225#M1947 <P>I'm scheduling a search that spans -1h@h and ends -@h, however the UI doesn't like my syntax:</P> <P>Cannot parse time argument 'dispatch.latest_time': '-@h'</P> Wed, 10 Oct 2012 16:13:33 GMT https://community.splunk.com/t5/Reporting/Scheduling-search-how-to-snap-to-current-hour-for-now/m-p/86225#M1947 the_wolverine 2012-10-10T16:13:33Z https://community.splunk.com/t5/Reporting/Scheduling-search-how-to-snap-to-current-hour-for-now/m-p/86226#M1948 <P>The argument for latest_time should work by using <CODE>-h</CODE> without the <CODE>@</CODE>.</P> Wed, 10 Oct 2012 16:48:11 GMT https://community.splunk.com/t5/Reporting/Scheduling-search-how-to-snap-to-current-hour-for-now/m-p/86226#M1948 alacercogitatus 2012-10-10T16:48:11Z https://community.splunk.com/t5/Reporting/Scheduling-search-how-to-snap-to-current-hour-for-now/m-p/86227#M1949 <P>This would give you the previous hour snapped back to current hour (ie. if current time is 10:15, this would be 9:00 - 10:00):<BR /> earliest=-1h@h latest=@h</P> <P>This would give you the previous hour from now (if current time is 10:15, 9:15 to 10:15):<BR /> earliest=-1h latest=now</P> Wed, 10 Oct 2012 18:12:07 GMT https://community.splunk.com/t5/Reporting/Scheduling-search-how-to-snap-to-current-hour-for-now/m-p/86227#M1949 DaveO35 2012-10-10T18:12:07Z