https://community.splunk.com/t5/Splunk-Search/earliest-and-latest-information-in-custom-python-search-command/m-p/537470#M151944 <P>For the sake of anyone searching and finding this, these return a float that matches time picker when I try them. I just wish I could find inheritable or nested Option() types so I can borrow those with their existing validation.</P><P>earliest = self.search_results_info.api_et<BR />latest = self.search_results_info.api_lt</P> Wed, 27 Jan 2021 18:02:11 GMT lumpymilk 2021-01-27T18:02:11Z https://community.splunk.com/t5/Splunk-Search/earliest-and-latest-information-in-custom-python-search-command/m-p/189691#M54632 <P>I was not able to find in the doc a way to get earliest and latest information from the datetimepicker to use in my generating custom search command..</P> <P>Any Idea how that work ?</P> Wed, 25 Dec 2013 11:16:54 GMT https://community.splunk.com/t5/Splunk-Search/earliest-and-latest-information-in-custom-python-search-command/m-p/189691#M54632 sbsbb 2013-12-25T11:16:54Z https://community.splunk.com/t5/Splunk-Search/earliest-and-latest-information-in-custom-python-search-command/m-p/189692#M54633 <P>You could prefix the call to your custom generating command like this:</P> <PRE><CODE>| stats count | addinfo | your_command </CODE></PRE> <P>That way you should get info about the time range as input events for your command.</P> <P>I don't think there's an intended way for accessing this directly - any more. Taken from the doc of splunk.Intersplunk:</P> <PRE><CODE>getOrganizedResults(input_str=None) Converts an Intersplunk-formatted file object into a dict representation of the contained events, and returns a tuple of: (results, dummyresults, settings) "dummyresults" is always an empty list, and "settings" is always an empty dict, since the change to csv stopped sending the searchinfo. It has not been updated to store the auth token. </CODE></PRE> <P>My guess is you're looking for what used to be in <CODE>searchinfo</CODE>.</P> Wed, 25 Dec 2013 22:18:12 GMT https://community.splunk.com/t5/Splunk-Search/earliest-and-latest-information-in-custom-python-search-command/m-p/189692#M54633 martin_mueller 2013-12-25T22:18:12Z https://community.splunk.com/t5/Splunk-Search/earliest-and-latest-information-in-custom-python-search-command/m-p/537470#M151944 <P>For the sake of anyone searching and finding this, these return a float that matches time picker when I try them. I just wish I could find inheritable or nested Option() types so I can borrow those with their existing validation.</P><P>earliest = self.search_results_info.api_et<BR />latest = self.search_results_info.api_lt</P> Wed, 27 Jan 2021 18:02:11 GMT https://community.splunk.com/t5/Splunk-Search/earliest-and-latest-information-in-custom-python-search-command/m-p/537470#M151944 lumpymilk 2021-01-27T18:02:11Z