Is it possible to use the "latest" time modifier as a field for calculations?

[HeinzWaescher]

Hi,

I would like to use the "latest" time modifier that is defined by the the timerange picker or in my base search as a value for calculations. Is there a field that includes this timestamp and can be used?

Thanks in advance
Heinz

[elliotproebstel · Accepted solution]

You can get that value by using the addinfo command. Use | addinfo and your events will all have four new fields:

info_min_time: corresponds to the "earliest" time in your timepicker
info_max_time: corresponds to the "latest" time in your timepicker <-- the one you want
info_sid: the ID of the search you ran
info_search_time: the time you ran the search

[HeinzWaescher]

this works fine, thanks 🙂

[gcusello]

Hi HeinzWaescher,
you can use it in dashboard panels as token: e.g. if your time picher token is called "Time", you have $Time.latest$
Bye.
Giuseppe