Dashboards & Visualizations

How to set report timeframe to run across data from beginning to end of previous month?

atornes
Path Finder

I have a report that I'd like to have cover data from the beginning to end of the previous full month (i.e. today is January 12, I want the report to cover December 1-31). How can I set this time range? I've figured out how to set the start time (-1mon@mon or 1 month back snap to month) but I can't figure out how to specify the end of last month. The best option I know of is now, and that is not correct for my report.

Help!

0 Karma
1 Solution

lguinn2
Legend

@mon

Means the beginning of the current month, which is the same as the end of the last month.

View solution in original post

lguinn2
Legend

@mon

Means the beginning of the current month, which is the same as the end of the last month.

lguinn2
Legend

Dang! Thanks for the correction damuscat!! i fixed the answer

@m is the beginning of the current minute

@mon is the beginning of the current month

0 Karma

damuscat
Explorer

Isn't @m the current minute? I think @mon is the right answer for the beginning of the current month. Happy to be told I'm wrong though 🙂

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...