<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: how to get data last 15minutes data from last 7 days time range saved search? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/how-to-get-data-last-15minutes-data-from-last-7-days-time-range/m-p/694803#M236299</link>
    <description>&lt;P&gt;I dont want to change the time range.&lt;/P&gt;</description>
    <pubDate>Wed, 31 Jul 2024 08:38:07 GMT</pubDate>
    <dc:creator>nivets</dc:creator>
    <dc:date>2024-07-31T08:38:07Z</dc:date>
    <item>
      <title>how to get data last 15minutes data from last 7 days time range saved search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-get-data-last-15minutes-data-from-last-7-days-time-range/m-p/694675#M236263</link>
      <description>&lt;P&gt;I have a saved search which is scheduled for every 17mins with time range of last 7 days. instead of getting results with last 7 days of data, can i get only last 15 or 20mins data and i should not change the time range in saved search from last 7 days .&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 30 Jul 2024 12:46:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-get-data-last-15minutes-data-from-last-7-days-time-range/m-p/694675#M236263</guid>
      <dc:creator>nivets</dc:creator>
      <dc:date>2024-07-30T12:46:17Z</dc:date>
    </item>
    <item>
      <title>Re: how to get data last 15minutes data from last 7 days time range saved search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-get-data-last-15minutes-data-from-last-7-days-time-range/m-p/694689#M236266</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/246022"&gt;@nivets&lt;/a&gt;- Question has paradox. Do you want to change the time-range or not change the timerange?&lt;/P&gt;</description>
      <pubDate>Tue, 30 Jul 2024 14:08:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-get-data-last-15minutes-data-from-last-7-days-time-range/m-p/694689#M236266</guid>
      <dc:creator>VatsalJagani</dc:creator>
      <dc:date>2024-07-30T14:08:59Z</dc:date>
    </item>
    <item>
      <title>Re: how to get data last 15minutes data from last 7 days time range saved search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-get-data-last-15minutes-data-from-last-7-days-time-range/m-p/694690#M236267</link>
      <description>&lt;P&gt;You can use the &lt;FONT face="courier new,courier"&gt;savedsearch&lt;/FONT&gt; command to run a saved search in your query.&amp;nbsp; If you use the time picker to specify a time range other than All Time then the saved search will use your selected time range; otherwise, the time range in the saved search will be used.&lt;/P&gt;</description>
      <pubDate>Tue, 30 Jul 2024 14:19:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-get-data-last-15minutes-data-from-last-7-days-time-range/m-p/694690#M236267</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2024-07-30T14:19:11Z</dc:date>
    </item>
    <item>
      <title>Re: how to get data last 15minutes data from last 7 days time range saved search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-get-data-last-15minutes-data-from-last-7-days-time-range/m-p/694803#M236299</link>
      <description>&lt;P&gt;I dont want to change the time range.&lt;/P&gt;</description>
      <pubDate>Wed, 31 Jul 2024 08:38:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-get-data-last-15minutes-data-from-last-7-days-time-range/m-p/694803#M236299</guid>
      <dc:creator>nivets</dc:creator>
      <dc:date>2024-07-31T08:38:07Z</dc:date>
    </item>
  </channel>
</rss>

