I have a timestamp variable EmailSendAt=2020-07-15 05:52:13.186 ,
Whenever I am using
stats value(EmailSendAt) as time..
It shows me only Date part.. Time part is discarding. (I used table also but no change happen)
index=_internal |head 1| fields _raw _time
| eval _raw="EmailSendAt=2020-07-15 05:52:13.186 , "
| rename COMMENT as "the logic"
| kv
your fields extractions is wrong. try kv
EmailSendAt is a field and whenever I pull this field with by
stats values(EmailSendAt) as time .... it shows only date part.
For example suppose
EmailSendAt=2020-07-15 05:52:13.186
then using stats values(EmailSendAt) as time only shows me date part. Please help
.
Thanks
try kv before stats