Splunk Search

How to set earliest and latest to run a search for an alert from 7am to 7pm?

Path Finder

I want to run a search for an alert from 7am to 7pm. Please help me with earliest and latest values

earliest=?
latest=?
0 Karma
1 Solution

Super Champion
earliest=@d+7h latest=@d+19h

i think that would do it.

View solution in original post

Super Champion
earliest=@d+7h latest=@d+19h

i think that would do it.

View solution in original post