![Implementing Splunk 7(Third Edition)](https://wfqqreader-1252317822.image.myqcloud.com/cover/64/36700064/b_36700064.jpg)
上QQ阅读APP看书,第一时间看更新
Relative
If the Relative presets are not what you need, you can use the custom Relative time range options to specify a time range for your search that is relative to Now. You can select from the list of time range units, Seconds Ago, Minutes Ago, and so on:
![](https://epubservercos.yuewen.com/DFC051/19470395608897106/epubprivate/OEBPS/Images/e221c965-8756-4514-b2a0-0ec01f0c7402.png?sign=1738907198-YCn99YbtNDaKOzv1XnTypi0am9Omdgxh-0-1f0d62c2e719a66419d6686f5f056169)
Splunk also provides the ability to use Beginning of second (the default) or a No Snap-to time unit to indicate the nearest or latest time to which your time amount rounds up. If you don't specify a snap-to time unit, Splunk snaps automatically to the second. Unlike the Presets, to actually apply your (Relative) selections to the search, you need to click on the Apply button.