Timewrap

This small app gives you a new, convenient search command called "timewrap" that does it all, for arbitrary time periods. Compare week-over-week, day-over-day, month-over-month, quarter-over-quarter, year-over-year, or any multiple (e.g. two week periods over two week periods). Just add "| timewrap w" after a 'timechart' command, and compare week-over-week. Or use 'h' (hour), 'w' (week), 'm' (month), 'q' (quarter), 'y' (year). Beginning in version 6.5.0, the Timewrap command in this app is included in the Splunk search processing language: http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Timewrap "THIS IS AWESOME!" "Now I don't need to twist my brain to get the week vs week graphs right." "Cool thanks. Playing with timewrap now! Cool tool, especially for noobs" David Carasso, Splunk’s Chief Mind, wrote this and many other apps, as well as the book Exploring Splunk. We still miss him http://blogs.splunk.com/2015/01/30/remembering-david/.