Include date on a Splunk report

[butzowj]

Hello Splunkers -

I'd like to include the time/date range of a search in my report. If I have a report that runs at midnight showing all the results for yesterday, I'd like to be able to see the actual date on the report, not just the word "yesterday".

Is there any way this can be done?

Thanks.

[woodcock · Accepted solution]

Yes, you can use now like this:

... | eval runDate=now()

Then you can reference it with $results.runDate$.