Hi All,
I need some help in searching,
so I have 1 index but it has multiple sources,
Index = Index1
and within the index, it has few sources
file_2021-05-14.csv
file_2021-05-15.csv
file_2021-05-16.csv
I'd like to make a search that the source will be dynamically depending on today date,
Index=Index1 source = "file_yyyy_mm_dd.csv"
is this possible?
Thank you!
Can you please try this?
index=index1 [| makeresults | eval source="file_".strftime(now(),"%Y-%m-%d").".csv" | table source]
Thanks
KV
▄︻̷̿┻̿═━一
If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.
Can you please try this?
index=index1 [| makeresults | eval source="file_".strftime(now(),"%Y-%m-%d").".csv" | table source]
Thanks
KV
▄︻̷̿┻̿═━一
If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.