can I get the earliest and latest time of custom time and/or the scheduled search in my search?

[marcokrueger]

huhu dear community,
is there a possibility to get the values from

1. the timerange of the custom time...?
2. the timerange of a scheduled search?

Background: I have s search with a subsearch, where the subsearch needs events of a different index with a time-offset. I think I need a variable like my dummies global_earliest and global_latest
index=ABC | append [ index=DEF earliest=global_earliest-3600 lastest=global_latest-3600 ] | ...

thank you
Marco 🙂

[Ayn]

Yes. Use addinfo.

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Addinfo

[marcokrueger]

I thought the addinfo is only availaible after the search, is this right?
How can I use the addinfo-result in the subsearch? Can you please give me an example?

Best regards
Marco