https://community.splunk.com/t5/Splunk-Search/How-do-I-get-results-for-just-yesterday/m-p/150634#M185513 <P>This works for me:</P> <P><CODE>index=_internal earliest=-1d@d latest=-0d@d</CODE></P> Fri, 02 May 2014 17:13:11 GMT lukejadamec 2014-05-02T17:13:11Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-results-for-just-yesterday/m-p/150632#M185511 <P>This seems like a simple proposition, yet I'm having a hard time finding date parameters to embed in my search to just get results for yesterday's 24 hour period. </P> <P>Anyone have any insight?</P> <P>Thank you,</P> <P>Mike</P> Fri, 02 May 2014 16:58:09 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-results-for-just-yesterday/m-p/150632#M185511 MichaelCohen829 2014-05-02T16:58:09Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-results-for-just-yesterday/m-p/150633#M185512 <P>You can select "Yesterday" in the time range picker, or set <CODE>earliest=-d@d latest=@d</CODE>.</P> Fri, 02 May 2014 17:07:32 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-results-for-just-yesterday/m-p/150633#M185512 martin_mueller 2014-05-02T17:07:32Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-results-for-just-yesterday/m-p/150634#M185513 <P>This works for me:</P> <P><CODE>index=_internal earliest=-1d@d latest=-0d@d</CODE></P> Fri, 02 May 2014 17:13:11 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-results-for-just-yesterday/m-p/150634#M185513 lukejadamec 2014-05-02T17:13:11Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-results-for-just-yesterday/m-p/150635#M185514 <P>Awesome - both of these solutions worked perfectly. </P> <P>Thanks so much!</P> Fri, 02 May 2014 17:36:34 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-results-for-just-yesterday/m-p/150635#M185514 MichaelCohen829 2014-05-02T17:36:34Z