Dashboards & Visualizations

How to set report timeframe to run across data from beginning to end of previous month?

atornes
Path Finder

I have a report that I'd like to have cover data from the beginning to end of the previous full month (i.e. today is January 12, I want the report to cover December 1-31). How can I set this time range? I've figured out how to set the start time (-1mon@mon or 1 month back snap to month) but I can't figure out how to specify the end of last month. The best option I know of is now, and that is not correct for my report.

Help!

0 Karma
1 Solution

lguinn2
Legend

@mon

Means the beginning of the current month, which is the same as the end of the last month.

View solution in original post

lguinn2
Legend

@mon

Means the beginning of the current month, which is the same as the end of the last month.

lguinn2
Legend

Dang! Thanks for the correction damuscat!! i fixed the answer

@m is the beginning of the current minute

@mon is the beginning of the current month

0 Karma

damuscat
Explorer

Isn't @m the current minute? I think @mon is the right answer for the beginning of the current month. Happy to be told I'm wrong though 🙂

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...