What is the correct way to use a time range specifier in the search bar so that the search looks back 2 hours?
A . latest=-2h
B . earliest=-2h
C . latest=-2hour@d
D . earliest=-2hour@d
Answer: B
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Search/Specifytimemodifiersinyoursearch