Hi
I would like to know if it is possible to use a bin span with now() like with _time?
bin _time span=1h
Thanks
Time keeps moving - now() is the current time - it cannot be stopped by Splunk - it would take an act of a supernatural being to do that - except in science fiction 😀
Time keeps moving - now() is the current time - it cannot be stopped by Splunk - it would take an act of a supernatural being to do that - except in science fiction 😀