Splunk Commands : Discussion on "return" and "format" command

[@sugyansahu9120]

The format command's extra optional parameters helped me a lot in completing my search. Very happy. Thanks for the help I got from this video. :)

[@yoykchillbuddy593]

thanks a lot for your work!!

[@rahulreddy3899]

Hi Team, I have a subquery which returns me 2 events with times, I want to find events in between those two returned events times in my main query...how can i achieve that?

[@splunk_ml]

I think using subsearch its possible, it will be something like below, index= earliest=[your second search returning earliest timestamp] latest=[your second search returning latest timestamp] you can refer the subsearch video I created before, kzbin.info/www/bejne/iprafKNjiZpprrM

[@Umar2522]

Can you also make a video which shows the steps to troubleshoot when data doesnt get ingested. How to examine the internal files.

[@grainfrizz]

You might want to increase / magnify your fonts as some users are watching on phone. Just a suggestion. :) Thanks for all the help you're doing to Splunky people.

[@splunk_ml]

Yes you are right... I need to work on my editing skills... 👍

[@supersaiyanamg]

I'm still confused on and