Splunk Search

How to include data filter so as to select particular date time records in splunk dashboard?


hi  team,


i am using below splunk search in dashboards query


index=BigIt log_severity=INFO or WARN app_name= test-cap-generator country_code=USA error_code= COA-1004 earliest=-5d rex " total number where indicator I is Z(?<Counts>\d)" | stats count by _time, Counts | table _time,Counts

Requirement : i have to filter runs which are occuring once..  daily and ignore the duplicate runs which are showing up in splunk query any suggestion please how can i ignore those duplicate runs

anything which ran after 07:00 am should be ignored for that particular day


for example in below image for date 2023-02-02 i have to filter only  06:28 run 



Labels (3)
0 Karma

| eval time=strftime(_time,"%H%M")
| where time < 700
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...

Starting With Observability: OpenTelemetry Best Practices

Tech Talk Starting With Observability: OpenTelemetry Best Practices Tuesday, October 17, 2023   |  11AM PST / ...