huhu dear community,
is there a possibility to get the values from
Background: I have s search with a subsearch, where the subsearch needs events of a different index with a time-offset. I think I need a variable like my dummies global_earliest and global_latest
index=ABC | append [ index=DEF earliest=global_earliest-3600 lastest=global_latest-3600 ] | ...
thank you
Marco 🙂
I thought the addinfo is only availaible after the search, is this right?
How can I use the addinfo-result in the subsearch? Can you please give me an example?
Best regards
Marco