Hi,
We have a report generating data on first day of each month and also on first day of each week.
We need to get the data of first day of each month. We have the query as below
|eval assetCount=tonumber(substr(Message,42))| eval month = strftime(_time, "%m") |stats max(assetCount) as "Total Count" by month|sort month desc
But, this gives the last data of each month.
Can you please help in getting the first data of each month. That is the report generated on the first day of each month.
