https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400362#M116000 <P>Does "latest=-14d@d" mean last Business days? or last natural days? thanks!</P> Wed, 16 Jan 2019 10:11:10 GMT wangzhaoyu 2019-01-16T10:11:10Z https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400358#M115996 <P>I have a set of data with "submit date" like "2019-Jan-16 17:42:00". How can I get data submitted before 14 Business days? Thanks!</P> Wed, 16 Jan 2019 09:43:30 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400358#M115996 wangzhaoyu 2019-01-16T09:43:30Z https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400359#M115997 <P>HI,</P> <P>do you want all data older than 14 days , or the data that came in on the 14th day before today?</P> Wed, 16 Jan 2019 09:58:18 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400359#M115997 dkeck 2019-01-16T09:58:18Z https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400360#M115998 <P>Hi,</P> <P>I want the number of all data older than 14 Business days. thanks!</P> Wed, 16 Jan 2019 10:01:03 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400360#M115998 wangzhaoyu 2019-01-16T10:01:03Z https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400361#M115999 <P>try <CODE>index=your_index latest=-14d@d earliest=0 | stats count</CODE></P> <P>for a simple count</P> Wed, 16 Jan 2019 10:06:02 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400361#M115999 dkeck 2019-01-16T10:06:02Z https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400362#M116000 <P>Does "latest=-14d@d" mean last Business days? or last natural days? thanks!</P> Wed, 16 Jan 2019 10:11:10 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400362#M116000 wangzhaoyu 2019-01-16T10:11:10Z https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400363#M116001 <P>Hi Try this simple query</P> <PRE><CODE>index=your_index latest=-14d@d earliest=0 NOT (date_wday=saturday OR date_wday=sunday) </CODE></PRE> <P>let me know if this helps!</P> Wed, 16 Jan 2019 10:28:24 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-data-created-before-last-14-Business-days/m-p/400363#M116001 mayurr98 2019-01-16T10:28:24Z