Specify a Dynamic Date Range
Search offers a flexible, dynamic setting for the time range where you can enter the desired time stamp without using the calendar to specify days, hours, and minutes. The dynamic date range uses the following syntax:
<dynamic_time>
or
<dynamic_time> [+/- <units>]
For example, to search for events that have occurred in the last two hours, you can specify $Now – 2h for Start time and $Now for End time. To find events that have occurred this week, you can enter $CurrentWeek for Start time and $Now for End time.
To enter a dynamic date range:
When viewing a search or starting a query, select the currently specified time range.
For the start or end time under Custom Range, select Dynamic.
To specify the dynamic_time, enter one of the following values:
|
Value |
Represents |
|---|---|
|
$Now |
The current minute |
|
$Today |
Midnight of the current day |
|
$CurrentWeek |
Midnight of the previous Monday (or same as $Today if today is Monday) |
|
$CurrentMonth |
Midnight on the first day of the current month |
|
$CurrentYear |
Midnight on the first day of the current year |
To specify the units, enter one of the following values:
|
Value |
Represents |
|---|---|
|
m (lowercase) |
Minutes |
|
h |
Hours |
|
d |
Days |
|
w |
Weeks |
|
M (uppercase) |
Months |