Splunk Search

How can I search events occured in last one hour

Ravi_c
New Member

Hi,

Is there any command for filtering out the search results that occured in last 24 hrs.

Please help.

Tags (4)
0 Karma

Ayn
Legend

You can either use the timerange picker in the web GUI, or you can use time modifiers directly in your search, like this:

... earliest=-1d

http://docs.splunk.com/Documentation/Splunk/6.0.3/SearchReference/SearchTimeModifiers

Ayn
Legend

Please read docs and apply a suitable one. This is no place where we solve all your problems for you, rather we help you solve problems.

0 Karma

MuS
SplunkTrust
SplunkTrust
0 Karma

Ravi_c
New Member

I m on 5.0.3, Please provide suitable one, from your solution it is saying invalid earliest command

0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

REGISTER NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more ...

Security Highlights | November 2022 Newsletter

 November 2022 2022 Gartner Magic Quadrant for SIEM: Splunk Named a Leader for the 9th Year in a RowSplunk is ...

Platform Highlights | November 2022 Newsletter

 November 2022 Skill Up on Splunk with our New Builder Tech Talk SeriesCan you build it? Yes you can! *play ...