Getting Data In

splunk date and time variables

theertpr
Explorer

Hi, I have a requirement to create a dashboard view of events occuring from Friday last week to Thrusday running week and reset on Friday to do the same again..

What should i use in the advance search language?
I tried earliest: @w5 to latest +d@w4

Tags (1)
0 Karma

gkanapathy
Splunk Employee
Splunk Employee
earliest=-0d@w5 lastest=now

seems to me should do it, though it is unclear to me if I understood you correctly. Perhaps you meant

earliest=-6d@w5 latest=+1d@w5
0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...