https://community.splunk.com/t5/Splunk-Search/Using-earliest-with-custom-time-field/m-p/544285#M154180 <P>If you convert the TIMESTAMP_DERIVED to _time then you can do what you are doing, but that will depend on if you still need _time to be present.</P><P>Note that the data you search for will only appear in your results if _time is within the time range selected, so even if&nbsp;TIMESTAMP_DERIVED is a time within your search window it will not be found</P><P>You can convert&nbsp;TIMESTAMP_DERIVED with</P><LI-CODE lang="markup">| eval _time=strptime(TIMESTAMP_DERIVED, "_format_specifiers_here")</LI-CODE><P>&nbsp;</P> Thu, 18 Mar 2021 05:31:07 GMT bowesmana 2021-03-18T05:31:07Z https://community.splunk.com/t5/Splunk-Search/Using-earliest-with-custom-time-field/m-p/544282#M154177 <P>This below query gives me the earliest trigger_name according to the splunk log timestamps. But I have a custom timestamp field called TIMESTAMP_DERIVED which does not match the _time and I want to do my earliest calculation based on that field. Is this possible?</P><P>eventtype=sfdc-event-log | stats earliest(TRIGGER_NAME), earliest(TRIGGER_TYPE) by REQUEST_ID&nbsp;</P><P>&nbsp;</P> Thu, 18 Mar 2021 05:16:42 GMT https://community.splunk.com/t5/Splunk-Search/Using-earliest-with-custom-time-field/m-p/544282#M154177 agh 2021-03-18T05:16:42Z https://community.splunk.com/t5/Splunk-Search/Using-earliest-with-custom-time-field/m-p/544285#M154180 <P>If you convert the TIMESTAMP_DERIVED to _time then you can do what you are doing, but that will depend on if you still need _time to be present.</P><P>Note that the data you search for will only appear in your results if _time is within the time range selected, so even if&nbsp;TIMESTAMP_DERIVED is a time within your search window it will not be found</P><P>You can convert&nbsp;TIMESTAMP_DERIVED with</P><LI-CODE lang="markup">| eval _time=strptime(TIMESTAMP_DERIVED, "_format_specifiers_here")</LI-CODE><P>&nbsp;</P> Thu, 18 Mar 2021 05:31:07 GMT https://community.splunk.com/t5/Splunk-Search/Using-earliest-with-custom-time-field/m-p/544285#M154180 bowesmana 2021-03-18T05:31:07Z