topic Relating data with time in Splunk Search https://community.splunk.com/t5/Splunk-Search/Relating-data-with-time/m-p/498335#M194873 <P>Hi,<BR /> I would like to view today and yesterday data in the same chart for the required time range.</P> <P>How can that be done.<BR /> Help required!<BR /> Thanks!</P> Tue, 12 May 2020 19:53:38 GMT prettysunshinez 2020-05-12T19:53:38Z Relating data with time https://community.splunk.com/t5/Splunk-Search/Relating-data-with-time/m-p/498335#M194873 <P>Hi,<BR /> I would like to view today and yesterday data in the same chart for the required time range.</P> <P>How can that be done.<BR /> Help required!<BR /> Thanks!</P> Tue, 12 May 2020 19:53:38 GMT https://community.splunk.com/t5/Splunk-Search/Relating-data-with-time/m-p/498335#M194873 prettysunshinez 2020-05-12T19:53:38Z Re: Relating data with time https://community.splunk.com/t5/Splunk-Search/Relating-data-with-time/m-p/498336#M194874 <P>add <CODE>|where _time &gt; relative_time(now(), "@d+6h") AND _time &lt; relative_time(now(), "@d+12h")</CODE></P> Tue, 12 May 2020 20:46:17 GMT https://community.splunk.com/t5/Splunk-Search/Relating-data-with-time/m-p/498336#M194874 to4kawa 2020-05-12T20:46:17Z Re: Relating data with time https://community.splunk.com/t5/Splunk-Search/Relating-data-with-time/m-p/498337#M194875 <P>@to4kawa I would like to view for any specified Time range.<BR /> Time range is not fixed</P> Tue, 12 May 2020 20:57:47 GMT https://community.splunk.com/t5/Splunk-Search/Relating-data-with-time/m-p/498337#M194875 prettysunshinez 2020-05-12T20:57:47Z Re: Relating data with time https://community.splunk.com/t5/Splunk-Search/Relating-data-with-time/m-p/498338#M194876 <P>make dashboard and token, so use this logic.</P> Tue, 12 May 2020 21:13:41 GMT https://community.splunk.com/t5/Splunk-Search/Relating-data-with-time/m-p/498338#M194876 to4kawa 2020-05-12T21:13:41Z Re: Relating data with time https://community.splunk.com/t5/Splunk-Search/Relating-data-with-time/m-p/498339#M194877 <P>You can use the timewrap command to do this, e.g.</P> <PRE><CODE>index=_internal earliest=-4h | timechart span=1m count | timewrap 1h </CODE></PRE> <P>and it will generate 4 series, one for each hour on the same chart overlayed on top with the x-axis showing the last hour</P> Thu, 14 May 2020 06:14:00 GMT https://community.splunk.com/t5/Splunk-Search/Relating-data-with-time/m-p/498339#M194877 bowesmana 2020-05-14T06:14:00Z