https://community.splunk.com/t5/Splunk-Search/Can-you-help-me-with-my-non-overlapping-time-window-query/m-p/427845#M166980 <P>Min and Max are _time min and max values per database. Any ideas on how can I find when a MIN is higher than another MAX? This means that the samples are not on overlapping windows.</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/5925i1ED9B6FE975C1C6B/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Tue, 16 Oct 2018 20:27:19 GMT tamakg 2018-10-16T20:27:19Z https://community.splunk.com/t5/Splunk-Search/Can-you-help-me-with-my-non-overlapping-time-window-query/m-p/427845#M166980 <P>Min and Max are _time min and max values per database. Any ideas on how can I find when a MIN is higher than another MAX? This means that the samples are not on overlapping windows.</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/5925i1ED9B6FE975C1C6B/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Tue, 16 Oct 2018 20:27:19 GMT https://community.splunk.com/t5/Splunk-Search/Can-you-help-me-with-my-non-overlapping-time-window-query/m-p/427845#M166980 tamakg 2018-10-16T20:27:19Z https://community.splunk.com/t5/Splunk-Search/Can-you-help-me-with-my-non-overlapping-time-window-query/m-p/427846#M166981 <P>Try this at the end of your search...</P> <PRE><CODE>| eventstats min(max) as minmax | where min &gt;= minmax </CODE></PRE> Tue, 16 Oct 2018 20:54:38 GMT https://community.splunk.com/t5/Splunk-Search/Can-you-help-me-with-my-non-overlapping-time-window-query/m-p/427846#M166981 DalJeanis 2018-10-16T20:54:38Z