Solved: How to use a relative time in my search? - Splunk Community

Splunk Search

hello

I need to use a relative time in my search wich specify 8 days ago between 7h and 19h from now

I try this but it doenst works

earliest=@-8d+7h latest=@-8d+19h

how to do please?

1 Solution

Solution

Close.

earliest=-8d@d+7h latest=-8d@d+19h

View solution in original post

Solution

Close.

earliest=-8d@d+7h latest=-8d@d+19h

Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...