What does the preset time range "last 30 days" mean exactly?

[ealler]

I've been given output of a query that makes use of the "last 30 days" time range, and need to know exactly what "last 30 days" means. The data is aggregated, so the output does not have a date field in it. I do not have access to Splunk directly so I cannot run test queries. 

For example, if the query is run on 8-31-2022, does "last 30 days" give me 8/2 to 8/31 or would it be 8/1 to 8/30?

[richgalloway · Accepted solution]

"Last 30 days" begins 30 days before today (the 1st if today is the 31st) at 0:00 and ends the minute the search starts.