Hi,
My issue is :
I have a panel like that :
what I want is to change dynamically the color (red for example) when this is not equal to the curent time.
I have my request like this :
index=abc
| stats count by Timestamp
| eval epochtime=strptime(Timestamp, "%Y-%m-%dT%H:%M:%S.%N")| eval desired_time=strftime(epochtime, "%d/%m/%Y %H:%M:%S")
| rename desired_time as timestamp
| fields timestamp
| sort timestamp desc
| eval now = now()
| fieldformat now = strftime(now, "%d/%m/%Y %H:%M:%S")
| head 1
| where timestamp<now
The format option is not useful in this case.
How can I do this ?
Thanks !
