Splunk Search

Possible bug in value of $latest$ of previous business week

fjp2485
Engager

Hi,

On my dashboard I have a time picker. When I choose previous business week then its $earliest$ contains -6d@w1 and $latest$ contains -1d@w6. Today is 06/03/2019, Monday. Earliest goes back to the last Tuesday (of the previous week) and the 1st day is Monday (05/27/2019), which is good. But latest goes back one day, to Sunday (06/02/2019), to the 0th day of current week, and 6th day is the next Saturday: 06/08/2019, instead of the previous Saturday, 06/01/2019. I guess the proper value of $latest$ when choosing previous business week would be: -6d@w6.

With best regards,
fjp2485

0 Karma
Get Updates on the Splunk Community!

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...