Dashboards & Visualizations

How to set report timeframe to run across data from beginning to end of previous month?

atornes
Path Finder

I have a report that I'd like to have cover data from the beginning to end of the previous full month (i.e. today is January 12, I want the report to cover December 1-31). How can I set this time range? I've figured out how to set the start time (-1mon@mon or 1 month back snap to month) but I can't figure out how to specify the end of last month. The best option I know of is now, and that is not correct for my report.

Help!

0 Karma
1 Solution

lguinn2
Legend

@mon

Means the beginning of the current month, which is the same as the end of the last month.

View solution in original post

lguinn2
Legend

@mon

Means the beginning of the current month, which is the same as the end of the last month.

lguinn2
Legend

Dang! Thanks for the correction damuscat!! i fixed the answer

@m is the beginning of the current minute

@mon is the beginning of the current month

0 Karma

damuscat
Explorer

Isn't @m the current minute? I think @mon is the right answer for the beginning of the current month. Happy to be told I'm wrong though 🙂

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...