Knowledge Management

KV store lookup last updated field


Hello all,

I want to add last updated date column in dashboard for KV store lookup.

When I am using time () or now() and updating a single row, last updated date get changed for all the records available in the table.


Kindly suggest how to update last updated date (rowwise) for the record update and not the entire table.


Thanks in advance!


Labels (1)
Tags (1)
0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!