Archive

Include date on a Splunk report

Path Finder

Hello Splunkers -

I'd like to include the time/date range of a search in my report. If I have a report that runs at midnight showing all the results for yesterday, I'd like to be able to see the actual date on the report, not just the word "yesterday".

Is there any way this can be done?

Thanks.

Tags (1)
0 Karma
1 Solution

Esteemed Legend

Yes, you can use now like this:

... | eval runDate=now()

Then you can reference it with $results.runDate$.

View solution in original post

Esteemed Legend

Yes, you can use now like this:

... | eval runDate=now()

Then you can reference it with $results.runDate$.

View solution in original post