https://community.splunk.com/t5/Splunk-Search/Splunk-Query-for-Nessus-vulnerabilities-between-firstSeen-and/m-p/422444#M171740 <P>How about this?</P> <PRE><CODE>index=tenable sourcetype=tenable:sc:vuln pluginID=56213 firstSeen&gt;1538883238 lastSeen&lt;1555827242 </CODE></PRE> Wed, 24 Apr 2019 16:39:33 GMT spayneort 2019-04-24T16:39:33Z https://community.splunk.com/t5/Splunk-Search/Splunk-Query-for-Nessus-vulnerabilities-between-firstSeen-and/m-p/422443#M171739 <P>I’m new to Splunk. I’m trying to come up with a search that would provide me with the number of Nessus vulnerability events related to a specific pluginID that falls between the firstSeen and the lastSeen dates (the dates are in epoch time). I understand this isn’t correct but I tried a lot of different combo’s and nothing seems to narrow the number of events down to the 18 (I should see)</P> <P>Index=tenable sourcetype-tenable:sc:vuln adobe | spath pluginID | search pluginID=56213 | search firstSeen=1538883238 OR lastSeen=1555827242</P> <P>Thanks </P> Tue, 23 Apr 2019 13:48:42 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-Query-for-Nessus-vulnerabilities-between-firstSeen-and/m-p/422443#M171739 alexj2323 2019-04-23T13:48:42Z https://community.splunk.com/t5/Splunk-Search/Splunk-Query-for-Nessus-vulnerabilities-between-firstSeen-and/m-p/422444#M171740 <P>How about this?</P> <PRE><CODE>index=tenable sourcetype=tenable:sc:vuln pluginID=56213 firstSeen&gt;1538883238 lastSeen&lt;1555827242 </CODE></PRE> Wed, 24 Apr 2019 16:39:33 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-Query-for-Nessus-vulnerabilities-between-firstSeen-and/m-p/422444#M171740 spayneort 2019-04-24T16:39:33Z https://community.splunk.com/t5/Splunk-Search/Splunk-Query-for-Nessus-vulnerabilities-between-firstSeen-and/m-p/422445#M171741 <P>Thanks for the assistance... </P> Mon, 29 Apr 2019 16:10:47 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-Query-for-Nessus-vulnerabilities-between-firstSeen-and/m-p/422445#M171741 alexj2323 2019-04-29T16:10:47Z