can we make a field to _time and pass values through earliest / latest or through Time range button ?
What you are looking for is the way to use rex in sed mode . Here are a couple of examples.
rex
sed
https://answers.splunk.com/answers/562493/how-to-use-lookup-file-to-set-earliest-and-latest.html
https://answers.splunk.com/answers/572538/how-do-i-dynamically-set-earliest-from-subsearch.html
Use more words to put the question in context. Please explain the problem you are trying to solve.
Actually I want to use one field as _Time and time range selection should pass on that field
Hi
Check this
https://www.splunk.com/en_us/blog/tips-and-tricks/i-cant-make-my-time-range-picker-pick.html
