I'm scheduling a search that spans -1h@h and ends -@h, however the UI doesn't like my syntax:
Cannot parse time argument 'dispatch.latest_time': '-@h'
This would give you the previous hour snapped back to current hour (ie. if current time is 10:15, this would be 9:00 - 10:00):
earliest=-1h@h latest=@h
This would give you the previous hour from now (if current time is 10:15, 9:15 to 10:15):
earliest=-1h latest=now
This would give you the previous hour snapped back to current hour (ie. if current time is 10:15, this would be 9:00 - 10:00):
earliest=-1h@h latest=@h
This would give you the previous hour from now (if current time is 10:15, 9:15 to 10:15):
earliest=-1h latest=now
The argument for latest_time should work by using -h
without the @
.