• http://docs.splunk.com/Documentation/Splunk/6.3.5/Data/Aboutdefaultfields

Default datetime fields such as date_hour and date_minute can be used to search for events during a specific time period.

Example of use

If you only want to search for events with timestamps between 9:00 and 17:00, add the following condition to your search statement:

(date_hour>=9 AND date_hour<=17)

See the documentation below for a list of Default datetime fields.

http://docs.splunk.com/Documentation/Splunk/6.3.5/Data/Aboutdefaultfields

It is also possible to search using the above fields after specifying a specific period in advance with the time range picker.

that's all