Hi @krish1733 Pls check the Splunk Documentation for this topic: https://docs.splunk.com/Documentation/Splunk/9.1.1/Search/Specifytimemodifiersinyoursearch Splunk provides many options to specify these times.. for example, you can relatively calculate these times.. you can use a subsearch for calculating these times and pass it to main search. let us know more info about your requirements, so we can suggest you best ideas/solutions. As you are a new member, i would like to suggest you.. the karma points / upvotes are appreciated. if any post solves your question, please "accept that as the solution".. so the question will move out of unanswered queue, also it will help those who help you, thanks.
... View more