https://community.splunk.com/t5/Splunk-Search/Using-latest-in-search-results-in-all-time-not-today/m-p/37698#M8487 <P>When you put "latest" in your search, it trumps the selection in the date/time picker. The workaround is to also include "earliest" in your search string.</P> Fri, 16 Nov 2012 19:32:23 GMT richgalloway 2012-11-16T19:32:23Z https://community.splunk.com/t5/Splunk-Search/Using-latest-in-search-results-in-all-time-not-today/m-p/37697#M8486 <P><IMG src="http://splunk-base.splunk.com//storage/searchresults.png" alt="alt text" />I have this very simple search</P> <P>sourcetype=iis latest=+6h</P> <P>When I select Today from the date/time picker and run the search it returns results for all time. My iis logs are UTC but are converted to Central time by Splunk. I need the 6 hour offset to get the times to match existing non Splunk reports.</P> <P>As can be seen in the screen shot the search continued to a point much earliern than midnight today, November 16. Seeing this happen is very scary because it throws into doubt many of my production dashboard results. Does anyone have any ideas?</P> Fri, 16 Nov 2012 19:14:32 GMT https://community.splunk.com/t5/Splunk-Search/Using-latest-in-search-results-in-all-time-not-today/m-p/37697#M8486 kmattern 2012-11-16T19:14:32Z https://community.splunk.com/t5/Splunk-Search/Using-latest-in-search-results-in-all-time-not-today/m-p/37698#M8487 <P>When you put "latest" in your search, it trumps the selection in the date/time picker. The workaround is to also include "earliest" in your search string.</P> Fri, 16 Nov 2012 19:32:23 GMT https://community.splunk.com/t5/Splunk-Search/Using-latest-in-search-results-in-all-time-not-today/m-p/37698#M8487 richgalloway 2012-11-16T19:32:23Z https://community.splunk.com/t5/Splunk-Search/Using-latest-in-search-results-in-all-time-not-today/m-p/37699#M8488 <P>Doh! I shold have known that. It's been a long year.</P> Fri, 16 Nov 2012 20:16:27 GMT https://community.splunk.com/t5/Splunk-Search/Using-latest-in-search-results-in-all-time-not-today/m-p/37699#M8488 kmattern 2012-11-16T20:16:27Z