I would like to only search logs generated within the last hour. My search right now is:
search index="webops_webprod" "Invalid" earliest=-20m
However, when I run this search through Splunk's Java SDK, the job is queued, but I never receive a response (i.e. the job is never marked as completed). I'm assuming something's wrong with my command which is causing this.
↧