Synopsis

Filters (i.e. narrows) the search results based on a time range.

Syntax

^{TIME_UNIT is START_TIME-END_TIME}

Required Arguments

^TIME_UNIT

^{Syntax: time, hour, minute, second, day of week, or day of month}

Description: The time unit of the time range

^START_TIME

^{Syntax: <start time>}

Description: The start time of the time range

^END_TIME

^{Syntax: <end time>}

Description: The end time of the time range

Optional Arguments

None

Description

Filters the search results based on a specific time range. The "time is" search query can be built only by using the simple search syntax (see Performing a Simple Search)

Examples

Example 1:  

^{time is 8-16 in log.access}

From the events in access log, shows the events starting at 8 and ending at 16.

Example 2:  

^{hour is 10-14 in log.access}

From the events in access log, shows the events starting at 10 and ending at 14.

Example 3:  

^{day of week is 1-3 in log.access}

From the events in access log, shows the events starting at Sunday and ending at Tuesday.

Example 4:  

^{day of month is 10-15 in log.access}

From the events in access log, shows the events starting at 10^th and ending at 15^th.