Search for "after hours" events

Graylog Central (peer support)
1

Hi all,

I’d like to create a search that find all events that happen between a certain set of hours over several days. For example, I’d like to be able to search for events that happen from 11pm and 6am over the last week when I’m not expecting that there should be much activity. Can anyone help me with some search syntax for accomplishing this?

Thanks!

2

A quick search in the forum found a few answers:

This one… which I think lead to this one they are more about business hours but they will put you on the right track…

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.