Hi
I am facing a difficult situation. I have 2 time fields: CreateDateTime and UpdateDateTime.
In the events, UpdateDateTime is used for _time. In some time pickers, I want this time to be used.
However, for some time pickers, I want to bind it to CreateDateTime, but cannot find a way to do it.
Can somebody help?
You can refer to this blog post, I believe it's exactly what you need. Just replace the author's custom time field (claim_filling_date) with yours (CreateDateTime).
http://blogs.splunk.com/2016/09/16/i-cant-make-my-time-range-picker-pick/