Synopsis

Filters (i.e. narrows) the search results based on a time range.

Syntax

TIME_UNIT is START_TIME-END_TIME

Required Arguments

TIME_UNIT

Syntax: time, hour, minute, second, day of week, or day of month

Description: The time unit of the time range

START_TIME 

Syntax: <start time>

Description: The start time of the time range

END_TIME 

Syntax: <end time>

Description: The end time of the time range

Optional Arguments

None

Description

Filters the search results based on a specific time range. The "time is" search query can be built only by using the simple search syntax (see Performing a Simple Search)

Examples

Example 1:  

time is 8-16 in log.access 

From the events in access log, shows the events starting at 8 and ending at 16.

Example 2:  

hour is 10-14 in log.access 

From the events in access log, shows the events starting at 10 and ending at 14.

Example 3:  

day of week is 1-3 in log.access 

From the events in access log, shows the events starting at Sunday and ending at Tuesday.

Example 4:  

day of month is 10-15 in log.access 

From the events in access log, shows the events starting at 10^th and ending at 15^th.