Dashboards & Visualizations

How can I get a range of one month since days vary from 30 to 31 days?

New Member

You can make ranges by months to show it in a drilldown since the days of the months are varied

0 Karma

Esteemed Legend

Use relative-time specifiers like @mon for the start of this month and @mon+1mon-1day for the end of this month, e.g.:

| eval start=relative_time(now(), "@mon"), end=relative_time(now(), "@mon+1mon-1d")
| convert ctime(*)
0 Karma
Get Updates on the Splunk Community!

Dashboard Studio Challenge - Learn New Tricks, Showcase Your Skills, and Win Prizes!

Reimagine what you can do with your dashboards. Dashboard Studio is Splunk’s newest dashboard builder to ...

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...