I have the Begin time and End time as below for an event (which is again extracted using another query)
Begin time : 4:43:55:336 AM
End time : 4:53:00:00 AM
I wanted to pass this earliest and latest time for another panel in the dashboard.
Could you kindly help
You have the Begin time and End time!! But what date you want to consider ?? Current date?
In case of the current date, you can update your another search with below search logic to get
| makeresults | eval date=strftime(now(),"%Y-%m-%d") | eval Begin_time=strptime(date." 4:43:55:336 AM","%Y-%m-%d %H:%M:%S:%3Q") | eval End_time=strptime(date." 4:53:00:00 AM","%Y-%m-%d %H:%M:%S:%3Q")
Here I have used your provided static value as
End_time. You can use your filed name also.
date field you can mention your required date as well.
Consider below search.
| makeresults | eval Begin_time=strptime("04/01/2019 4:43:55:336 AM","%d/%m/%Y %H:%M:%S:%3Q") | eval End_time=strptime("04/01/2019 4:53:00:00 AM","%d/%m/%Y %H:%M:%S:%3Q")