Can't seem to understand relative_time

[sfghjkl]

Hi,

I am working my way through some of the splunk courses. I am currently on "working with time".

In one of the videos the following command is used to find all results within the past day, rounding down.

"| eval yesterday = relative_time(now(),"1d@h")".

However when I attempt this command myself, it simply prints the "yesterday" value however it uses the time specified in my time picker, not in the actual command.

I was under the impression that any time specified within a command would automatically overwrite the time picker.

Was I mistaken in this? Or am I perhaps using the command incorrectly?

Any help would be greatly appreicated.

[richgalloway]

The eval command merely assigns a value to a field (variable).  It has no effect on the time picker.

What *does* override the time picker are the earliest and latest options in the search command.