Dashboards & Visualizations

Time range of a search

christinmb
Path Finder

I'm trying to make a Real time search that only has 5 minutes of background, is it possible to do?

0 Karma
1 Solution

Michael_Schyma1
Contributor

Yes, Click next to the search bar where the time is. A drop down menu should be displayed, go down to real time (5 minute window)

View solution in original post

0 Karma

Michael_Schyma1
Contributor

Yes, Click next to the search bar where the time is. A drop down menu should be displayed, go down to real time (5 minute window)

0 Karma

christinmb
Path Finder

would be rt-5m but thanks anyway 😄

0 Karma

Michael_Schyma1
Contributor

go into searches and reports find your report, and in start time type in -5m@m and at the end time type in now

0 Karma

christinmb
Path Finder

what if i already have a search configured and I only want to modify the search time range? something like -5m?

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...