Can anyone help me to understand below condition
where _time>=if("$field1.earliest$"=="0",1,relative_time(now(),"$field1.earliest$")) AND _time<=case("$field1.latest$"=="",relative_time(now(),"-1m"),"$field1.latest$"=="now",now(),true(),relative_time(now(),"$field1.latest$"))
field1 is the time token here
I assume that your events are coming in from something other than a normal search (e.g. dbxquery
or inputlookup
) and you need to do the time filtering yourself. It is just doing the normal Time Picker
time/date filtering.