Here is second part to the same question How to use lookup if there are multiple locations with different business hours ? @gcusello @renjith_nair @emile194  ... View more

Correct! I need to export these saved searches, dashboards and reports to another instance of Splunk.  ... View more

For others, what I did was I created a lookup table with hour and value. So from the payload hour field was already extracted and being compared to the lookup table with hours define for off business in column Tag. The query to put using lookup after extracting the message  | lookup offbusinesshours.csv Time as Tag_hour output Value as Value | where isnull(Value) ... View more

Hi Ranjith, To define off business hours what query can we put in search? Also, I have the search for the logged events just request you to help me with the command how to define the off business hours Thanks ... View more