I'm trying to display results within my panels on my dashboard for the previous week Sunday at 12am to Sat at 11:59:59pm. I've tried using -w0 to -w6, but it keeps throwing date range error. And I tried using -w, but that does not appear to give me the previous week, and if does could someone clarify if it giving me the range I'm looking for?
TIA for the help!
Try:
-1week@week to -0week@week
OR
-1w@w to -0w@w
For more info on time abbreviations see:
http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/SearchTimeModifiers
Try:
-1week@week to -0week@week
OR
-1w@w to -0w@w
For more info on time abbreviations see:
http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/SearchTimeModifiers
Thanks for the quick response, and I appreciate the help. That page is much more helpful than the one I was looking at
http://docs.splunk.com/Documentation/Splunk/5.0.2/Search/Specifytimemodifiersinyoursearch
Thanks for the quick and accurate response.