Search date range that returns last 4 full hours

[mbtsoltis]

Is it possible to do a search that returns the last 4 full hours? Meaning, if it is 5:13 PM it would return results between 1:00 PM and 5:00 PM (filters out off the current hour)

Thanks in advance for any responses

[richgalloway · Accepted solution]

Yes, it is possible and easy.

index=foo earliest=-4h@h latest=@h