Assuming a standard time zone across the environment, what syntax will always return events from...

Splunk SPLK-1004 Question Answer

Assuming a standard time zone across the environment, what syntax will always return events from between 2:00 AM and 5:00 AM?

datehour>-2 AND date_hour<5

earliest=-2h@h AND latest=-5h@h

time_hour>-2 AND time_hour>-5

earliest=2h@ AND latest=5h3h

SPLK-1004 PDF/Engine

Get 75% Discount on All Products, Use Coupon: "ac75sure"