topic Re: can we make a field to _time and pass values through earliest / latest in splunk in Splunk Search https://community.splunk.com/t5/Splunk-Search/can-we-make-a-field-to-time-and-pass-values-through-earliest/m-p/494941#M137962 <P>Use more words to put the question in context. Please explain the problem you are trying to solve.</P> Thu, 07 May 2020 18:35:35 GMT richgalloway 2020-05-07T18:35:35Z can we make a field to _time and pass values through earliest / latest in splunk https://community.splunk.com/t5/Splunk-Search/can-we-make-a-field-to-time-and-pass-values-through-earliest/m-p/494940#M137961 <P>can we make a field to _time and pass values through earliest / latest or through Time range button ?</P> Thu, 07 May 2020 18:14:43 GMT https://community.splunk.com/t5/Splunk-Search/can-we-make-a-field-to-time-and-pass-values-through-earliest/m-p/494940#M137961 rakeshksingh 2020-05-07T18:14:43Z Re: can we make a field to _time and pass values through earliest / latest in splunk https://community.splunk.com/t5/Splunk-Search/can-we-make-a-field-to-time-and-pass-values-through-earliest/m-p/494941#M137962 <P>Use more words to put the question in context. Please explain the problem you are trying to solve.</P> Thu, 07 May 2020 18:35:35 GMT https://community.splunk.com/t5/Splunk-Search/can-we-make-a-field-to-time-and-pass-values-through-earliest/m-p/494941#M137962 richgalloway 2020-05-07T18:35:35Z Re: can we make a field to _time and pass values through earliest / latest in splunk https://community.splunk.com/t5/Splunk-Search/can-we-make-a-field-to-time-and-pass-values-through-earliest/m-p/494942#M137963 <P>Actually I want to use one field as _Time and time range selection should pass on that field </P> Fri, 08 May 2020 02:49:37 GMT https://community.splunk.com/t5/Splunk-Search/can-we-make-a-field-to-time-and-pass-values-through-earliest/m-p/494942#M137963 rakeshksingh 2020-05-08T02:49:37Z Re: can we make a field to _time and pass values through earliest / latest in splunk https://community.splunk.com/t5/Splunk-Search/can-we-make-a-field-to-time-and-pass-values-through-earliest/m-p/494943#M137964 <P>Hi</P> <P>Check this</P> <P><A href="https://www.splunk.com/en_us/blog/tips-and-tricks/i-cant-make-my-time-range-picker-pick.html">https://www.splunk.com/en_us/blog/tips-and-tricks/i-cant-make-my-time-range-picker-pick.html</A></P> Fri, 08 May 2020 05:00:27 GMT https://community.splunk.com/t5/Splunk-Search/can-we-make-a-field-to-time-and-pass-values-through-earliest/m-p/494943#M137964 vnravikumar 2020-05-08T05:00:27Z Re: can we make a field to _time and pass values through earliest / latest in splunk https://community.splunk.com/t5/Splunk-Search/can-we-make-a-field-to-time-and-pass-values-through-earliest/m-p/494944#M137965 <P>What you are looking for is the way to use <CODE>rex</CODE> in <CODE>sed</CODE> mode . Here are a couple of examples.</P> <P><A href="https://answers.splunk.com/answers/562493/how-to-use-lookup-file-to-set-earliest-and-latest.html">https://answers.splunk.com/answers/562493/how-to-use-lookup-file-to-set-earliest-and-latest.html</A></P> <P><A href="https://answers.splunk.com/answers/572538/how-do-i-dynamically-set-earliest-from-subsearch.html">https://answers.splunk.com/answers/572538/how-do-i-dynamically-set-earliest-from-subsearch.html</A></P> Fri, 08 May 2020 21:35:11 GMT https://community.splunk.com/t5/Splunk-Search/can-we-make-a-field-to-time-and-pass-values-through-earliest/m-p/494944#M137965 DalJeanis 2020-05-08T21:35:11Z