Relative Time search (e.g. today 4AM)

[nicolas_pons]

Hi,

I have a report (scheduled to be run every 5 minutes) that I have built, it list the number of specific events over time, displayed using a column chart.
However, i know that there won't be events between midnight and 4AM, how can i have a yet relative earliest time (today) but a fix starting time of 4AM ?

I have spent quite some time looking for this and am rather stuck atm.

Many thanks for your support.

[richgalloway · Accepted solution]

Try earliest=@d+4h

[nicolas_pons]

Awesome ! It works ! Thanks for your fast answer.

[puneethgowda]

base search date_hour > 3 | stats.....