Other Usage

How to report on a specific date to a specific date per month?

duneclarke2
Explorer

I am trying to generate/send a report that shows results from the 28th of the previous month to the 28th of the current month automatically, without using the time picker.

Any help appreciated!

Labels (1)
Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Try this.

<<your base search>> earliest=-1mon@mon+28d latest=@mon+28d

The earliest option goes back one month from today then jumps to the beginning of the month and adds 28 days.  The latest option jumps to the beginning of the current month then adds 28 days.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

duneclarke2
Explorer

Thanks that did the trick! Sent Karma! 

richgalloway
SplunkTrust
SplunkTrust

Try this.

<<your base search>> earliest=-1mon@mon+28d latest=@mon+28d

The earliest option goes back one month from today then jumps to the beginning of the month and adds 28 days.  The latest option jumps to the beginning of the current month then adds 28 days.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...