Hi Splunkers,
i want to display last 8 hours data with 1 hour different without any index or kv table .like `makeresults` or `gentimes`
Eg:- **suppose now time is "2018-09-14 13:31:42"** `
|makeresults |eval current=now() | timechart span=1h count as duration.
**i want to display like below**
**time**
13:30
12:30
11:30
10:30
09:30
08:30
07:30
06:30
ThanQ in advance :(
↧
