Splunk Search

Controlling Date

minkyuk
Explorer

Hi, I have a column of timestamp in YYYY-MM-DD format.
I'm trying to limit it by specific date, and I feel like there should be some handy way to do this.

Would anyone be able to help?

Thank you,
Jack

Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

To limit the column to today: ... | where column="2015-07-20" | ....

---
If this reply helps you, Karma would be appreciated.
0 Karma

minkyuk
Explorer

How could I use inequality?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Either where column!="2015-07-20" or where NOT column="2015-07-20".

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

New This Month - Observability Updates Give Extended Visibility and Improve User ...

This month is a collection of special news! From Magic Quadrant updates to AppDynamics integrations to ...

Intro to Splunk Synthetic Monitoring

In our last post, we mentioned that the 3 key pieces of observability – metrics, logs, and traces – provide ...