Solved: Splunk: Pulling Time

itsmevic · ‎03-02-2020

I need to pull some logs that happen one hour after 2020-02-29 16:12:26:000, what would be the best time choice to use in Splunk to do this? Sounds super simple but I've gone through the time settings and can't find the best time setting to use for this.

itsmevic · ‎03-02-2020

Was able to figure this one out. I just set the time period ahead an hour.

View solution in original post

itsmevic · ‎03-02-2020

Was able to figure this one out. I just set the time period ahead an hour.

Splunk: Pulling Time

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

Join the Conversation