time expression

A time expression is a date/time interval as a number prefixed by a filter prefix (<, >, =, !=) and followed by a unit postfix (m, s, h, d, w).

Syntax <keyword>=<operator><value><unit-postfix>

  • <keyword> The argument-keyword.
  • <operator> The usual <, >, = or <>
  • <value> The value to match against value of <keyword> with operator <operator>
  • <unit-postfix> s (second), m (minute), h (hour), d (day), w (week)

Examples

filter+generated=>2d
means filter will match any records older than 2 days

filter+generated=<2h 
means match any records newer then 2 hours. 

Warning the unix shell interprets the "<,>,!". Use the "\" to avoid this. e.g. filter+generated=\>2d. And on NSClient++ you also need to specify "Allow Nasty Metachars" Option to allow the client to accept "dangerous" options like < and >.