Solved: Re: Splunk: Pulling Time

itsmevic · ‎03-02-2020

I need to pull some logs that happen one hour after 2020-02-29 16:12:26:000, what would be the best time choice to use in Splunk to do this? Sounds super simple but I've gone through the time settings and can't find the best time setting to use for this.

itsmevic · ‎03-02-2020

Was able to figure this one out. I just set the time period ahead an hour.

View solution in original post

itsmevic · ‎03-02-2020

Was able to figure this one out. I just set the time period ahead an hour.

Splunk: Pulling Time

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

Index This | What has goals but no motivation?

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Join the Conversation