How to pass variable to collect argument "file"?

[morethanyell]

Hi,

How can I pass the epoch time now() to the file argument of collect?

| ...
| collect spool=t addtime=t index="ourindex" file="[here, the current time here please thanks]_event.stash_new"

[morethanyell · Accepted solution]

this

| ...
| collect spool=t addtime=t index="ourindex" 
    [ | makeresults
    | eval retval = "file=" . strftime(now(), "%s") . "_event.stash_new"
    | return $retval ]