I am new to Splunk, what is meant by "-1d@d+12h" in the time-range? Please explain
Hi
It represents yesterday at 12 pm. -1d@d
- today -1(yesterday) @d+12h
- 12 pm
Ravi -24h@h means?
@h is the current hour.
-24h means 24 hours of yesterday? I so, when is the start time?
Please correct me.
current time(hour) - 24 hours
Thank you so much for your effort.
I entered +h@h and it is displaying at 3:30. The current time is 2:55. If @ is rounding off, it should round off to 4:00 right
you can check it by entering in the time range
The Search Reference manual explains time modifiers. See https://docs.splunk.com/Documentation/Splunk/7.3.3/SearchReference/SearchTimeModifiers. In this example, the time range starts at noon yesterday (one day ago at 0:00 ("-1d@d") plus twelve hours ("+12h")).
Hi
It represents yesterday at 12 pm. -1d@d
- today -1(yesterday) @d+12h
- 12 pm
Thank You. You mean, 1d@d = today.
-1d@d=yesterday?
@d today, -1d@d=yesterday
1d@d means? Please don't mind about asking silly questions. I am trying to make sure I get it.
1d@d - Invalid. If you prefix + +1d@d
represents next day
Perfect. Thank You