Solved: Splunk: Pulling Time

itsmevic · ‎03-02-2020

I need to pull some logs that happen one hour after 2020-02-29 16:12:26:000, what would be the best time choice to use in Splunk to do this? Sounds super simple but I've gone through the time settings and can't find the best time setting to use for this.

itsmevic · ‎03-02-2020

Was able to figure this one out. I just set the time period ahead an hour.

View solution in original post

itsmevic · ‎03-02-2020

Was able to figure this one out. I just set the time period ahead an hour.

Splunk: Pulling Time

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

What's New in Splunk Enterprise Security 8.8 and Beyond

A Four-Part Event Series: State of Observability - Where AI Meets Performance

Join the Conversation