I asked a few weeks ago how to get the total duration of my search timeframe and was told to use addinfo. Got it working out but when I made my search more complex by outer-joining to a subsearch i...
...nfo_max_time..
This is in 6.6.2 splunk Enterprise-Here it will give correct results in single right side is results of addinfo query.
This is the default time for date picker
<input t...
The new fields that are created when using the addinfo cmd
info_min_time The earliest time boundary for the search.
info_max_time The latest time boundary for the search.
How are they c...
...but doesn't work in 7. I have a tstats command that requires earliest/latest parameters, then pipes to an addinfo command, but I think I'm getting two different results. It appears that I only g...
I want to change the time range of my search by using addinfo. Below is my search query:
index =xxx sourcetype = xxx source="xxx/new_offers_web_*.log" Channel="web" Page="accthub" Placement="t...
Hi all,
Previously I've used "search_now" to determine the start time of a late-running scheduled search. This appears not to work anymore. Has this been deprecated? I can still use info_min_time,...
Hello!
I'm trying to figure out a way to display a single value that calculates users who have disconnected divided by the time range based on the time picker. The original number...
Hello, How to use specific start date in weekly timechart? For example: I have a set of Grade (Math, English, Science) data for Student1 and Student2 from 2/8/2024 to 3/1/2024 When I ...
...ather than just obtaining the SID of the base search, which currently happens when I use the addinfo command.
When I apply the addinfo command within the chained search, it only provides me with t...