https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214483#M62895 <P>@d-2h Snap to the beginning of today (12AM) and subtract 2 hours from that time.</P> <P>Please try<BR /> earliest=-d@d latest=now</P> Tue, 27 Sep 2016 13:13:50 GMT inventsekar 2016-09-27T13:13:50Z https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214479#M62891 <P>hi,</P> <P>i need to know what i should insert into latest_time and earliest_time to specify search only for current day </P> Tue, 29 Sep 2020 11:10:05 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214479#M62891 sfatnass 2020-09-29T11:10:05Z https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214480#M62892 <P>Check out this list of time modifiers in Splunk Docs, <A href="https://docs.splunk.com/Documentation/Splunk/6.4.3/Search/Specifytimemodifiersinyoursearch">https://docs.splunk.com/Documentation/Splunk/6.4.3/Search/Specifytimemodifiersinyoursearch</A></P> Tue, 27 Sep 2016 12:52:20 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214480#M62892 Walt_Splunk 2016-09-27T12:52:20Z https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214481#M62893 <P>For example, to start your search an hour ago use either of the following time modifiers.</P> <P>earliest=-h</P> <P>For current day, </P> <P>earliest=-d latest=now</P> Tue, 27 Sep 2016 13:04:50 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214481#M62893 inventsekar 2016-09-27T13:04:50Z https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214482#M62894 <P>earliest=-d latest=now</P> <P>get one day (24) i tryed it but he count since:<BR /> earliest=09/26/2016 15:09:00 latest=09/27/2016 15:09:00</P> <P>but i need only the current day:</P> <P>earliest=09/27/2016 00:00:00 latest=09/27/2016 15:09:00</P> Tue, 27 Sep 2016 13:10:45 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214482#M62894 sfatnass 2016-09-27T13:10:45Z https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214483#M62895 <P>@d-2h Snap to the beginning of today (12AM) and subtract 2 hours from that time.</P> <P>Please try<BR /> earliest=-d@d latest=now</P> Tue, 27 Sep 2016 13:13:50 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214483#M62895 inventsekar 2016-09-27T13:13:50Z https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214484#M62896 <P>i solved it just attribute earliest_time=@d not need latest_time thx for reply</P> Tue, 29 Sep 2020 11:10:07 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214484#M62896 sfatnass 2020-09-29T11:10:07Z https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214485#M62897 <P>You might also be interested in _index_earliest=-@d</P> Tue, 29 Sep 2020 11:13:19 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214485#M62897 jkat54 2020-09-29T11:13:19Z https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214486#M62898 <P>no just get logs only for today</P> Tue, 27 Sep 2016 14:12:45 GMT https://community.splunk.com/t5/Splunk-Search/how-to-search-only-for-current-date/m-p/214486#M62898 sfatnass 2016-09-27T14:12:45Z