Hello dear community,
I have a splunk search where I look for all the events that occur over a specific period of time. this period is "from Monday at 5 am until Friday 10 pm" I wish to be able to calculate the time that there is between this period independently of whether or not there are events in the period (it will depend on my choice in the "select time" button). if in my select time I chose the last month and the month is made up of 5 weeks I must calculate the time over all my periods "from Monday at 5 am until Friday 10 pm"
i have this :
...| eval date_wday = strftime(_time, "%w%H") | search date_wday>=106 AND date_wday<=523
Could you help me on this
