cat tserver.log | extract start=2007-02-11T22:55:15 stop=2007-02-11T22:56:13 cat tserver.log | extract start=2007-02-11T22:55:15 span=300 early=60