<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Incorrect Time Range for @d in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43421#M179141</link>
    <description>&lt;P&gt;I believe you can fix this by going to Manager -&amp;gt; Your account and then selecting your timezone&lt;/P&gt;</description>
    <pubDate>Fri, 04 May 2012 13:52:23 GMT</pubDate>
    <dc:creator>Drainy</dc:creator>
    <dc:date>2012-05-04T13:52:23Z</dc:date>
    <item>
      <title>Incorrect Time Range for @d</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43420#M179140</link>
      <description>&lt;P&gt;I have a graph that displays the license usage for the day. I have the time parameter say to "@d" because I only want to see for the current day.  &lt;/P&gt;

&lt;P&gt;The problem I am having is that the counter resets at 12:00AM GMT-1. I am in GMT-5, so the counter resets at 8:00PM local time. I want the counter to reset at 12:00AM GMT-5 or 5:00AM GMT.  &lt;/P&gt;

&lt;P&gt;Here is a copy of my search:  &lt;/P&gt;

&lt;PRE&gt;index=_internal source=*metrics.log group=per_index_thruput series!=_* | eval totalMB = round(kb/1024, 2) | chart sum(totalMB) as total&lt;/PRE&gt;

&lt;P&gt;Time is set to rt@d to rt&lt;/P&gt;</description>
      <pubDate>Fri, 04 May 2012 13:48:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43420#M179140</guid>
      <dc:creator>mchandx</dc:creator>
      <dc:date>2012-05-04T13:48:10Z</dc:date>
    </item>
    <item>
      <title>Re: Incorrect Time Range for @d</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43421#M179141</link>
      <description>&lt;P&gt;I believe you can fix this by going to Manager -&amp;gt; Your account and then selecting your timezone&lt;/P&gt;</description>
      <pubDate>Fri, 04 May 2012 13:52:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43421#M179141</guid>
      <dc:creator>Drainy</dc:creator>
      <dc:date>2012-05-04T13:52:23Z</dc:date>
    </item>
    <item>
      <title>Re: Incorrect Time Range for @d</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43422#M179142</link>
      <description>&lt;P&gt;This seems to only change the display. Does this also change the way the application works?&lt;/P&gt;</description>
      <pubDate>Fri, 04 May 2012 13:54:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43422#M179142</guid>
      <dc:creator>mchandx</dc:creator>
      <dc:date>2012-05-04T13:54:51Z</dc:date>
    </item>
    <item>
      <title>Re: Incorrect Time Range for @d</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43423#M179143</link>
      <description>&lt;P&gt;I believe it should also affect your time ranges within searches.&lt;/P&gt;</description>
      <pubDate>Fri, 04 May 2012 13:55:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43423#M179143</guid>
      <dc:creator>Drainy</dc:creator>
      <dc:date>2012-05-04T13:55:42Z</dc:date>
    </item>
    <item>
      <title>Re: Incorrect Time Range for @d</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43424#M179144</link>
      <description>&lt;P&gt;I'll give this a try. Unfortunately, there is no way to know until midnight. I will also try to specify the time perameter as "rt@d-4h" and see if that helps. I'll post back tomorrow with my results.&lt;/P&gt;</description>
      <pubDate>Fri, 04 May 2012 14:00:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43424#M179144</guid>
      <dc:creator>mchandx</dc:creator>
      <dc:date>2012-05-04T14:00:58Z</dc:date>
    </item>
    <item>
      <title>Re: Incorrect Time Range for @d</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43425#M179145</link>
      <description>&lt;P&gt;I have resolved this issue. It had nothing to do with Splunk, but rather a feature of the environment it is in. &lt;/P&gt;</description>
      <pubDate>Fri, 04 May 2012 14:57:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Incorrect-Time-Range-for-d/m-p/43425#M179145</guid>
      <dc:creator>mchandx</dc:creator>
      <dc:date>2012-05-04T14:57:13Z</dc:date>
    </item>
  </channel>
</rss>

