What is the correct way to use a time range specifier in the search bar so that the search looks back 2 hours?

Posted by: Pdfprep Category: SPLK-1001 Tags: , ,

What is the correct way to use a time range specifier in the search bar so that the search looks back 2 hours?
A . latest=-2h
B . earliest=-2h
C . latest=-2hour@d
D . earliest=-2hour@d

Answer: B

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Search/Specifytimemodifiersinyoursearch

Leave a Reply

Your email address will not be published.