iam receiving a message unbalanced quotes , i tried using back slash

[pavanraghav]

 | eval e="$time_token.earliest$", l=$time_token.latest$"| eval e=case(match(e,"^\d+$"),e,e="" OR e="now" , "0" , true(), relative_time(now(),e)) | eval l=case(match(l,"^\d+$"),l,l="" OR l="now" , "2145916800", true(), relative_time(now(),l)) 

[arjunpkishore5]

your missing a quote in your eval

| eval e="$time_token.earliest$", l="$time_token.latest$"
| eval e=case(match(e,"^\d+$"),e,e="" or e="now" , "0" , true(), relative_time(now(),e)) 
| eval l=case(match(l,"^\d+$"),l,l="" or l="now" , "2145916800", true(), relative_time(now(),l)) 

[pavanraghav]

thanks arjun

[renjith_nair · Accepted solution]

@pavanraghav ,

In your search above, you are missing a " in I=$time_token.latest$"

Also , please use the Code Sample to add your search snippets. I edited it for now

[pavanraghav]

thanks renjith