Splunk Dev

Custom Python Command: Is there any way to retrieve "earliest and "latest" time range using intersplunk?

cschmidt_hurric
Path Finder

I'm writing a Python custom command that's generating, so it doesn't receive any events. Is there any way to retrieve "earliest" and "latest" using Intersplunk?

0 Karma

woodcock
Esteemed Legend

You need the addinfo command, like this:

... | addinfo
0 Karma

MuS
SplunkTrust
SplunkTrust

Sorry to be the bearer of bad news again; but this will not work.
He's trying the build a a Python custom command that's generating, so it doesn't receive any events. therefore the command will not be able to use info_min_time nor info_max_time.
It would work if the custom command gets some events by using splunk.Intersplunk.readResults.

0 Karma
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...