Run a search over a random period

[chris]

I need to run a report that covers the time range of one day during the last business week because of security/privacy regulations.

What is the easiest way to do this?

Thanks
Chris

[chris · Accepted solution]

This helped:

http://answers.splunk.com/answers/142353/use-field-value-for-earliest-and-latest.html