how to search for a specific a certain minute or second in a each hour over a week/month in one search

[msmapper]

Hi all,

I would like to create a search that would only look at a certain minute or few seconds on the half hour over a 24hr or longer period. Basically, I want to see all of our log messages that occur at say the 25th and 55th minute every hour for the past day/week/month but I can't figure out what time range I would use.

any ideas would be appreciated.

regards
Jen

[msmapper]

thanks, this works perfectly

[msmapper]

thanks, this works perfectly

[jonuwz · Accepted solution]

There's a field called date_minute that you can use.

i.e.

( date_minute=25 OR date_minute=55 )