relative search

relative search

noun

A historical search with a time range where the earliest time is some number of seconds, minutes, hours, and so on, relative to "now" or the current second (the moment the search is launched). You can specify the time ranges for a relative search:

• In the time range picker, by using preset relative relative time ranges or by defining the earliest time and identifying whether the latest time is Now or the Beginning of current second.
• In your search string, using the "earliest" and "latest" relative time modifiers.

For more information

In the Search Manual:

• Select time ranges to apply to your search
• Specify time modifiers in your search