Dashboards & Visualizations

How to set report timeframe to run across data from beginning to end of previous month?

atornes
Path Finder

I have a report that I'd like to have cover data from the beginning to end of the previous full month (i.e. today is January 12, I want the report to cover December 1-31). How can I set this time range? I've figured out how to set the start time (-1mon@mon or 1 month back snap to month) but I can't figure out how to specify the end of last month. The best option I know of is now, and that is not correct for my report.

Help!

0 Karma
1 Solution

lguinn2
Legend

@mon

Means the beginning of the current month, which is the same as the end of the last month.

View solution in original post

lguinn2
Legend

@mon

Means the beginning of the current month, which is the same as the end of the last month.

lguinn2
Legend

Dang! Thanks for the correction damuscat!! i fixed the answer

@m is the beginning of the current minute

@mon is the beginning of the current month

0 Karma

damuscat
Explorer

Isn't @m the current minute? I think @mon is the right answer for the beginning of the current month. Happy to be told I'm wrong though 🙂

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...