https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659872#M227808 <P>How can one add to the result of a Splunk query running on Splunk UI the time span i.e. the values one can put in earliest_time and latest_time (the earliest and latest time are coming only from the drop down of the time span in Splunk UI)</P> Thu, 05 Oct 2023 21:14:17 GMT eranhauser 2023-10-05T21:14:17Z https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659872#M227808 <P>How can one add to the result of a Splunk query running on Splunk UI the time span i.e. the values one can put in earliest_time and latest_time (the earliest and latest time are coming only from the drop down of the time span in Splunk UI)</P> Thu, 05 Oct 2023 21:14:17 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659872#M227808 eranhauser 2023-10-05T21:14:17Z https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659882#M227810 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/241831">@eranhauser</a>&nbsp;... i am sorry, i am unable to understand your query..&nbsp;</P><P>you are running a search.. Would you like to know exactly when the SPL started to run and exactly when the SPL finished running? or you want to include these values inside the search itself?</P><P>Did you check the "Inspect Job" ?!?!</P> Thu, 05 Oct 2023 21:36:45 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659882#M227810 inventsekar 2023-10-05T21:36:45Z https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659888#M227815 <P>I am going to run my query using a scheduler so I want to record in each event the time span the query used to capture that event</P> Thu, 05 Oct 2023 23:13:11 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659888#M227815 eranhauser 2023-10-05T23:13:11Z https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659891#M227817 <P>Please run that scheduled search query and then check the "inspect job".. you will get more than you wanted. thanks.&nbsp;</P> Fri, 06 Oct 2023 00:02:22 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659891#M227817 inventsekar 2023-10-06T00:02:22Z https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659892#M227818 <P>I need these times in the event itself</P> Fri, 06 Oct 2023 00:04:15 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659892#M227818 eranhauser 2023-10-06T00:04:15Z https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659894#M227820 <P>then you should invent the timemachine, get the results, go back in time and update the results inside the event itself. &lt;bootstrap paradox&gt;</P> Fri, 06 Oct 2023 00:14:23 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-UI-query-start-and-end-time/m-p/659894#M227820 inventsekar 2023-10-06T00:14:23Z