I'm trying to show the relative time for the last time data was refreshed successfully. I search for all success text strings in the log file and then I need to get that time and do a reltime. I t...
I would like to format a field other than _time as relative time, like the reltime command does for _time (and only for _time , as far as I can tell). The following seems like it should w...
I've created a dashboard with a shared "time-input" (named range ) -- all of the panels refer to it:
<earliest>$range.earliest$</earliest>
<latest>$range.latest$<...
Hi all,
I need to set up an alert condition to notify me if the report doesn't generate data for more than 5 minute's
stats max(_time) as "Last Report Run" by reltime|dedup "Last Report R...
Hi,
index="sh" sourcetype="xml" status=* (Group="Connect" OR Group="health") AND (Section="Site" OR Section="Local") AND (Component="test" OR Component="test1")|dedup _time,Case|where Created_ON=...
I have one requirement:
I have one column in lookup as CaseCreatedDate.
It contain 175,908 data. From 2019 to 2020
Currently its showing data in this format:
2019-01-01T00:25:40.000+0000
2019...