Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
861 results
Sorted by:
03-14-2018
09:38 PM
1 Karma
Hi,
I am using below code snippet to generate previous 12 months.
| gentimes start=-365 end=-0 increment=0d
| eval Date=strftime(starttime,"%Y-%m-%d")
|sort Date | reverse
| table D...
Show results in replies (7)
-
...ass to gentimes to get all the dates. Finally after reverse , you can retain only first 365 results u...
-
Following two work (Starting with Jan/Feb) | gentimes start="01/16/2017" end=-0 increment=0...
-
@angelinealex can you try the following search and check results? | gentimes start=-365 end=-0...
-
...uery : | gentimes start=-365 end=-0 increment=0d | eval Date=strftime(starttime,"%Y-%m-%d") |sort - D...
-
...aving start and end dates are not working as expected for gentimes command!
-
@angelinealex First off... "good catch". I think you have found a bug with gentimes command. Y...
-
| gentimes start=1/16/17 end=-0 increment=0d | eval Date=strftime(starttime,"%Y-%m-%d...
02-07-2018
04:04 AM
Here is my SPL -
| gentimes start=02/07/2017 end=02/08/2017 increment=1h
| convert timeformat="%Y-%m-%d %H:%M:%S" ctime(starttime) as _time
| fields _time
| eval HourOfDay=strftime(_time, "%H...
08-21-2015
07:39 AM
...ince one year ago i thought that i can use gentimes. To do so I've tried to add :
|append [| gentimes start=08/24/2014 increment=28d|convert timeformat="%Y-%m" ctime(starttime) AS year_month|table y...
01-18-2018
10:08 AM
...ata. I believe this could be accomplished with gentimes. I just don't know how to format the search.
02-17-2020
12:30 AM
...elative_time(_time,"+2w@w"),"%m/%d/%Y")
| fields startDate, endDate
| map search="| gentimes start=\"$startDate$\" end=\"$endDate$\" increment=0d
| eval AsOfDate=strftime(starttime,\"%Y-%m-%d...
10-07-2019
06:55 AM
Hello all, I have a dashboard and I need the "|gentimes" command to generate dynamic values accordingly to the selected time picker. Picking up the earliest event from the search.
| gentimes s...
10-14-2016
09:13 AM
When Trying to run below query in Splunk search:
| gentimes start=-1 | eval YourDate="3:21:34 PM 10/14/2016" | table YourDate
| eval epoch1=strptime(YourDate,"%H:%M:%S %p %m/%d/%Y")
| c...
05-11-2011
11:01 PM
1 Karma
I have some gaps in my data. I want to fill those gaps only when I visualize it.I have some filler events created via gentimes. I found filldown can be used to get the last known value for a field i...
09-20-2017
12:20 AM
JSON:
"mainArray":
[
{"name":"MS","value":20},
{"name":"MC","value":20},
{"name":"CF","value":20},
{"name":"ST"},
{"name":"CMR","value":20}
]
-- i am currentl...
11-07-2014
06:32 AM
...ransaction DpsNum | convert ctime(CreateDateEpoch) as cd timeformat="%m/%d/%Y:%H:%M:%S" | eval ld=strftime(now(), "%m/%d/%Y:%H:%M:%S") | append [|gentimes start=$cd$ end=$ld$ | search starthuman!="Sun*" s...
