https://community.splunk.com/t5/Splunk-Search/Limit-Search-by-timeframe/m-p/11590#M809 <P>@sideview: could you provide a link with the documentation for the time range arguments for the REST API? I cannot find it (says I, knowing that the probability of a reply 5 years after the post is near zero)</P> Tue, 05 May 2015 16:24:59 GMT nikos_d 2015-05-05T16:24:59Z https://community.splunk.com/t5/Splunk-Search/Limit-Search-by-timeframe/m-p/11587#M806 <P>Want to run this search index="_internal" source="*metrics.log" group="per_host_thruput" splunk_server="splunk-x" | chart sum(kb) by series | sort - sum(kb) | head 5 | ] and want to limit it by day, week month etc</P> Fri, 16 Apr 2010 06:08:26 GMT https://community.splunk.com/t5/Splunk-Search/Limit-Search-by-timeframe/m-p/11587#M806 anasir 2010-04-16T06:08:26Z https://community.splunk.com/t5/Splunk-Search/Limit-Search-by-timeframe/m-p/11588#M807 <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0/Search/Selecttimerangestoapply" rel="nofollow">http://docs.splunk.com/Documentation/Splunk/5.0/Search/Selecttimerangestoapply</A></P> Fri, 16 Apr 2010 06:25:25 GMT https://community.splunk.com/t5/Splunk-Search/Limit-Search-by-timeframe/m-p/11588#M807 gkanapathy 2010-04-16T06:25:25Z https://community.splunk.com/t5/Splunk-Search/Limit-Search-by-timeframe/m-p/11589#M808 <P>If Im following correctly, I get the feeling you're using the CLI or the REST api maybe? If you're in the UI you use the time range picker pulldown. In the CLI there are earliest and latest arguments, and the REST api has similar earliest,latest arguments that you send along with the search string.</P> Fri, 16 Apr 2010 10:41:12 GMT https://community.splunk.com/t5/Splunk-Search/Limit-Search-by-timeframe/m-p/11589#M808 sideview 2010-04-16T10:41:12Z https://community.splunk.com/t5/Splunk-Search/Limit-Search-by-timeframe/m-p/11590#M809 <P>@sideview: could you provide a link with the documentation for the time range arguments for the REST API? I cannot find it (says I, knowing that the probability of a reply 5 years after the post is near zero)</P> Tue, 05 May 2015 16:24:59 GMT https://community.splunk.com/t5/Splunk-Search/Limit-Search-by-timeframe/m-p/11590#M809 nikos_d 2015-05-05T16:24:59Z https://community.splunk.com/t5/Splunk-Search/Limit-Search-by-timeframe/m-p/11591#M810 <P>I think what you're looking for is here - <A href="http://docs.splunk.com/Documentation/Splunk/6.2.2/SearchReference/SearchTimeModifiers">http://docs.splunk.com/Documentation/Splunk/6.2.2/SearchReference/SearchTimeModifiers</A> <BR /> or maybe here <A href="http://docs.splunk.com/Documentation/Splunk/6.2.2/Search/Specifytimemodifiersinyoursearch">http://docs.splunk.com/Documentation/Splunk/6.2.2/Search/Specifytimemodifiersinyoursearch</A></P> Tue, 05 May 2015 16:45:37 GMT https://community.splunk.com/t5/Splunk-Search/Limit-Search-by-timeframe/m-p/11591#M810 sideview 2015-05-05T16:45:37Z