https://community.splunk.com/t5/Splunk-Search/Time-range-search/m-p/103930#M26882 <P>I want the query for time range on search. Using the picker just gives you output I can't see what query it used.</P> Fri, 04 Nov 2011 13:19:44 GMT keshab 2011-11-04T13:19:44Z https://community.splunk.com/t5/Splunk-Search/Time-range-search/m-p/103928#M26880 <P>I have splunk indexed log for 6 months but I want to search log for 20 days only(from current date till 20 days ago) and draw a chart. What might be the possible search query??</P> Fri, 04 Nov 2011 13:03:39 GMT https://community.splunk.com/t5/Splunk-Search/Time-range-search/m-p/103928#M26880 keshab 2011-11-04T13:03:39Z https://community.splunk.com/t5/Splunk-Search/Time-range-search/m-p/103929#M26881 <P>Use the time picker in the search app. It gives you the ability to choose a time period to search.</P> <P>Edit: to accomplish the same thing directly in the search string, there's lots of info on how to do this here: <A href="http://docs.splunk.com/Documentation/Splunk/4.2.2/User/ChangeTheTimeRangeOfYourSearch">http://docs.splunk.com/Documentation/Splunk/4.2.2/User/ChangeTheTimeRangeOfYourSearch</A></P> <P>Long story short, use earliest=-20d.</P> Fri, 04 Nov 2011 13:12:15 GMT https://community.splunk.com/t5/Splunk-Search/Time-range-search/m-p/103929#M26881 Ayn 2011-11-04T13:12:15Z https://community.splunk.com/t5/Splunk-Search/Time-range-search/m-p/103930#M26882 <P>I want the query for time range on search. Using the picker just gives you output I can't see what query it used.</P> Fri, 04 Nov 2011 13:19:44 GMT https://community.splunk.com/t5/Splunk-Search/Time-range-search/m-p/103930#M26882 keshab 2011-11-04T13:19:44Z https://community.splunk.com/t5/Splunk-Search/Time-range-search/m-p/103931#M26883 <P>OK. It wasn't clear from the original question. I updated my answer with more info.</P> Fri, 04 Nov 2011 13:22:19 GMT https://community.splunk.com/t5/Splunk-Search/Time-range-search/m-p/103931#M26883 Ayn 2011-11-04T13:22:19Z