I'm pretty new to Splunk, so hopefully this is an easy question. I've looked all over the community questions and I have no problems finding out how to search for ranges of dates OR times, but for the life of me I can't figure out how to do dates AND times.
Basically I want to search for two EventCodes: 4624 and 4634. Because there are several thousand results on any given week, my only real concern is WHEN they logged on. I need to know when these IDs were created between the hours of 1700 and 0500 each day. I'd like to run this scan weekly, so is there a way to do -7d AND between 1700 and 0500 the next day? I hope I'm articulating this correctly. Any help would be greatly appreciated.
-Adam
