All Apps and Add-ons

How can i grab the data between 2 dates from my updated_date field?

svemurilv
Path Finder

Hi ,
I am using Splunk DB Connect to take the database data in to Splunk.
In that data, i have a data field name as update_date
In my dashboard, i would like to search the data based on the update_date and should take the input date_time from the time_picker drop-down.

i want search all updated data between x-date to y-date. Or updated date =x-date should display all the data on that updated data.

My updated_date and _time (indexing times) are different. My updated_date is in _raw.

In search, I am taking different sources data using "left join"

thanks

0 Karma
1 Solution

svemurilv
Path Finder

Thanks @soni its working

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...