Hi,
How can I pass the epoch time now() to the file argument of collect?
| ...
| collect spool=t addtime=t index="ourindex" file="[here, the current time here please thanks]_event.stash_new"
this
| ...
| collect spool=t addtime=t index="ourindex"
[ | makeresults
| eval retval = "file=" . strftime(now(), "%s") . "_event.stash_new"
| return $retval ]
this
| ...
| collect spool=t addtime=t index="ourindex"
[ | makeresults
| eval retval = "file=" . strftime(now(), "%s") . "_event.stash_new"
| return $retval ]