I have a log file(which is a notepad) i have indexed that log file as continuous monitoring. But whenever i add or remove data in log file, the new data is getting appended in index, But i want only recent data to be displayed. Is there any other way other than selecting time range from time picker?
@harinivgr ,
Do you have fields or do you want to see the _raw ? Do you have timestamps associated with the events or how do you identify the recent event?
You should be able to get it by stats latest()