Splunk Dev

Setting earliest_time through Java sdk

Hunterzz
New Member

i'm using Splunk java sdk to get search result. i want to setup timestamp for my search.

Args oneshotSearchArgs = new Args();
oneshotSearchArgs.put("earliest_time", "2019-02-19T12:00:00.000-07:00");
oneshotSearchArgs.put("latest_time", "2019-02-20T12:00:00.000-07:00");
String oneshotSearchQuery ="search index=app | head 2";

Instead giving date manually, i want to give

earliest_time --> 2 days
latest_time --> now

How can i do it?

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@Hunterzz

You can specify Splunk time modifier in oneshot arguments. Please check below link for Splunk time modifier example.

https://docs.splunk.com/Documentation/Splunk/7.2.5/Search/Specifytimemodifiersinyoursearch#Examples_...

Please check To run a basic oneshot search and display results
in http://dev.splunk.com/view/java-sdk/SP-CAAAEHQ .

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...