Dashboards & Visualizations

How to set report timeframe to run across data from beginning to end of previous month?

atornes
Path Finder

I have a report that I'd like to have cover data from the beginning to end of the previous full month (i.e. today is January 12, I want the report to cover December 1-31). How can I set this time range? I've figured out how to set the start time (-1mon@mon or 1 month back snap to month) but I can't figure out how to specify the end of last month. The best option I know of is now, and that is not correct for my report.

Help!

0 Karma
1 Solution

lguinn2
Legend

@mon

Means the beginning of the current month, which is the same as the end of the last month.

View solution in original post

lguinn2
Legend

@mon

Means the beginning of the current month, which is the same as the end of the last month.

lguinn2
Legend

Dang! Thanks for the correction damuscat!! i fixed the answer

@m is the beginning of the current minute

@mon is the beginning of the current month

0 Karma

damuscat
Explorer

Isn't @m the current minute? I think @mon is the right answer for the beginning of the current month. Happy to be told I'm wrong though 🙂

0 Karma
Get Updates on the Splunk Community!

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...