Skip to main content
Panther Knowledge Base

Does the `p_occurs` macro use `p_parse_time` in the Panther Data Explorer?


Does the p_occurs macro use p_parse_time?


No, as per our documentation, the p_occurs macro uses p_event_time by default.  However, if you would like the p_occurs macro to use p_parse_time, you can format your query like this:

p_occurs_since('1 day',,p_parse_time)
  • Was this article helpful?