Skip to main content
Time Macros app icon

Time Macros

The Time Macros app provides a set of globally shared eval based macros for doing time maths. For a long-form motiviational take on this see @duckfez' blog post: https://www.duanewaddle.com/searching-date-time-values-in-splunk/Built by Martin Müller
splunk product badge
Default Version 1.2.1

August 27, 2025

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

Rating
5
(3)

Log in to rate this app

Support
Not Supported
Ranking

#19 in Generic

The Time Macros app provides a set of globally shared eval based macros for doing time maths. For a long-form motiviational take on this see @duckfez' blog post: https://www.duanewaddle.com/searching-date-time-values-in-splunk/ See the Details tab up top for a list of macros and their description as well as real-world usage examples.