https://community.splunk.com/t5/Splunk-Search/86400-in-Splunk/m-p/225249#M188293 <P>86400 is the number of seconds in 24 hours. In your example it is used to convert the number of seconds since _time into the number of days since _time.</P> Wed, 27 Apr 2016 21:02:05 GMT richgalloway 2016-04-27T21:02:05Z https://community.splunk.com/t5/Splunk-Search/86400-in-Splunk/m-p/225248#M188292 <P>What significance does '86400' have in Splunk? For example, why is it used here, '| eval day=floor((now()-_time)/86400)'?</P> Wed, 27 Apr 2016 20:58:44 GMT https://community.splunk.com/t5/Splunk-Search/86400-in-Splunk/m-p/225248#M188292 phspec 2016-04-27T20:58:44Z https://community.splunk.com/t5/Splunk-Search/86400-in-Splunk/m-p/225249#M188293 <P>86400 is the number of seconds in 24 hours. In your example it is used to convert the number of seconds since _time into the number of days since _time.</P> Wed, 27 Apr 2016 21:02:05 GMT https://community.splunk.com/t5/Splunk-Search/86400-in-Splunk/m-p/225249#M188293 richgalloway 2016-04-27T21:02:05Z