topic Re: Filed value filter based on time in Splunk Search https://community.splunk.com/t5/Splunk-Search/Filed-value-filter-based-on-time/m-p/555760#M157783 <LI-CODE lang="markup">| dedup User,Time</LI-CODE> Tue, 15 Jun 2021 10:32:15 GMT ITWhisperer 2021-06-15T10:32:15Z Filed value filter based on time https://community.splunk.com/t5/Splunk-Search/Filed-value-filter-based-on-time/m-p/555756#M157779 <P>How to find field value for single day<BR /><BR /></P><P>Current table format<BR />| inputlookup monthly.csv</P><P>User&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Time&nbsp;</P><P>User1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2021-04-01<BR />user1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;2021-04-01<BR />User1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2021-04-01</P><P>User1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2021-04-01</P><P>User2&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2021-04-01<BR />user2&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2021-04-01<BR />User2&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2021-04-01</P><P>User2&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2021-04-01<BR /><BR />Expected :</P><P>user&nbsp; should appear only once for specific day<BR /><BR />| inputlookup monthly.csv<BR />example&nbsp;</P><P>User&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Time<BR />User1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2021-04-01<BR />User2&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2021-04-01</P> Tue, 15 Jun 2021 10:08:29 GMT https://community.splunk.com/t5/Splunk-Search/Filed-value-filter-based-on-time/m-p/555756#M157779 abdul 2021-06-15T10:08:29Z Re: Filed value filter based on time https://community.splunk.com/t5/Splunk-Search/Filed-value-filter-based-on-time/m-p/555760#M157783 <LI-CODE lang="markup">| dedup User,Time</LI-CODE> Tue, 15 Jun 2021 10:32:15 GMT https://community.splunk.com/t5/Splunk-Search/Filed-value-filter-based-on-time/m-p/555760#M157783 ITWhisperer 2021-06-15T10:32:15Z Re: Filed value filter based on time https://community.splunk.com/t5/Splunk-Search/Filed-value-filter-based-on-time/m-p/555762#M157784 <P>Thank you&nbsp; <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span><BR />it is working</P> Tue, 15 Jun 2021 10:34:54 GMT https://community.splunk.com/t5/Splunk-Search/Filed-value-filter-based-on-time/m-p/555762#M157784 abdul 2021-06-15T10:34:54Z