As the title suggests I am attempting to set a custom and default for a splunk dashboard that I created. When it opens I need it to snap to the previous weekday between 16:26 and 16:42 CST. Does anyone know how I would go about doing this?
Use default earliest=-w@w+1d and default latest=@w5+1d
(Use advanced section if you are selecting from timerange picker UI.)
Then use this filter in the SPL search query
where date_hour=16 AND date_minute>=26 AND date_minute<=42