Splunk® Cloud Services

SPL2 Search Reference

timewrap command usage

You must use the timechart command in the search before you use the timewrap command.

The wrapping is based on the end time of the search. If you specify the time range of All time, the wrapping is based on today's date. You see this in the timestamps for the _time field and in the data series names.

Differences between SPL and SPL2

The following arguments from SPL do not have an equivalent argument in SPL2.

  • series
  • time_format

See also

timewrap command
timewrap command overview
timewrap command syntax details
timewrap command examples
Last modified on 20 October, 2020
timewrap command syntax details   timewrap command examples

This documentation applies to the following versions of Splunk® Cloud Services: current

Was this topic useful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters