Splunk Search

Controlling Date

minkyuk
Explorer

Hi, I have a column of timestamp in YYYY-MM-DD format.
I'm trying to limit it by specific date, and I feel like there should be some handy way to do this.

Would anyone be able to help?

Thank you,
Jack

Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

To limit the column to today: ... | where column="2015-07-20" | ....

---
If this reply helps you, Karma would be appreciated.
0 Karma

minkyuk
Explorer

How could I use inequality?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Either where column!="2015-07-20" or where NOT column="2015-07-20".

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...