Getting Data In

splunk date and time variables

theertpr
Explorer

Hi, I have a requirement to create a dashboard view of events occuring from Friday last week to Thrusday running week and reset on Friday to do the same again..

What should i use in the advance search language?
I tried earliest: @w5 to latest +d@w4

Tags (1)
0 Karma

gkanapathy
Splunk Employee
Splunk Employee
earliest=-0d@w5 lastest=now

seems to me should do it, though it is unclear to me if I understood you correctly. Perhaps you meant

earliest=-6d@w5 latest=+1d@w5
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...