You can use this menu to select a time period for the data shown on the table. You can select a short time range to narrow down your search or you can use an extended period to analyze long-term patterns like an advanced persistent threat. You can perform the following actions:
...
| Info |
|---|
Daylight saving time may apply Be aware that the timezone corresponding to the initial date of the first interval selected in your search is used as a reference point for subsequent time ranges selected in the search window. This is especially important to take into account when using timezones that observe daylight saving time. |
...
Time expression | Description | Resulting time |
|---|---|---|
now() - 60m | 60 minutes ago | Sunday, 05 February 2017, 12:37:05 |
now() @ 1h | Now (rounded to the beginning of the hour) | Sunday, 05 February 2017, 13:00:00 |
now() - 24h | 24 hours ago | Saturday, 04 February 2017, 13:37:05 |
(now() - 1d) @ 1d | Yesterday (rounded to the beginning of the day) | Saturday, 04 February 2017, 00:00:00 |
(now() - 2d) @ 1d | 2 days ago (rounded to the beginning of the day) | Friday, 03 February 2017, 00:00:00 |
(now() - 2d) @ 1m | 2 days ago (rounded to the beginning of the minute) | Friday, 03 February 2017, 13:37:00 |
((now() - 2d) @ 1d) - 2h | 2 days ago (rounded to the beginning of the day minus 2 hours) | Thursday, 02 February 2017, 22:00:00 |
now() @ 1w | Locale week | Sunday, 05 February 2017, 00:00:00 |
now() @ 1W | ISO week | Monday, 30 January 2017, 00:00:00 |
now() ^ 6d | Replace the day with 6 | Monday, 06 February 2017, 13:37:05 |
now() ^ 2018y3M6d15h30m20s | Replaces the year with 2018 | Tuesday, 06 March 2018, 15:30:20 |
now() >> 2M | Forward to next second month | Monday, 05 February 2018, 13:37:05 |
now() << 2M | Backward to previous second month | Friday, 05 February 2016, 13:37:05 |
now() >> 2M6d15h20m10s | Forward to next second month, sixth day, fifteenth hour, twentieth minute and 10 seconds | Tuesday, 06 February 2018, 15:20:10 |
now() << 1h/1d | Goes back to the first hour of the current day. Minutes and seconds don't change. | Sunday, 05 February 2017, 01:37:05 |
...