what is the difference between -1d@d and -1d.

[aditsss]

Hi Team,

Can someone tell me the difference between -1d@d and -1d..

[gcusello]

Hi @aditsss,

-1d means one day from now.

-1d@d means one day from the start of the day (@d), in other words yesterday.

For more infos see at https://docs.splunk.com/Documentation/Splunk/8.2.0/SearchReference/SearchTimeModifiers

Ciao.

Giuseppe