Hello everybody,
in my dashboard I have a time selection at the top:
</input>
<input type = "time" token = "time">
<label> TimePicker </label>
<default>
<earliest> -14d @ h </earliest>
<latest> now </latest>
</default>
</input>
now the event list "Failed Event AccesLog" shows the errors with different timestamps:
<row>
<panel>
<event>
<title> Failed Event AccessLog </title>
<search>
<query> `log_index` $ environment $ $ RepoName $ AND" // contentserver / fff / "AND 500 | timechart count by contRep </query>
<earliest> $ time.earliest $ </earliest>
<latest> $ time.latest $ </latest>
</search>
<option name = "list.drilldown"> none </option>
<option name = "refresh.display"> progressbar </option>
</event>
</panel>
Now I want the event list "Imagemaster Log" to take the timestamps from the Event Access Log and the Imagemaster log compares these with a minimum and maximum of 2 seconds. for each timestamp.
Its Like a time range for each eventoutput from the Accesslog.
<panel>
<event>
<title> Failed Events Imagemaster Log </title>
<search>
<query> index = "xxx_log" OR index = "xxx-log" source = "/ xxx / yyy / zzz / ImageMaster.log" "Error" "* ContentServer *" </query>
<earliest> $ field1.earliest $ </earliest>
<latest> $ field1.latest $ </latest>
</search>
<option name = "list.drilldown"> none </option>
<option name = "refresh.display"> progressbar </option>
<option name = "rowNumbers"> 0 </option>
<option name = "table.drilldown"> none </option>
<option name = "type"> table </option>
</event>
</panel>
</row>
Unfortunately, I can't come up with a solution. I am thankful for any help.
