We have a query similar to:
| set intersect
[
search index=main earliest=3/12/2014:0:0:0 latest=3/13/2014:0:0:0 | eval Error=substr(message_text,0,75) | dedup Error | table Error
]
[
set diff
[
search index=main earliest=3/12/2014:0:0:0 latest=3/13/2014:0:0:0 | eval Error=substr(message_text,0,75) | dedup Error | table Error
]
[
search index=main earliest=3/01/2014:0:0:0 latest=3/07/2014:0:0:0 | eval Error=substr(message_text,0,75) | dedup JVM_Error | table Error
]
]
| table Error
We would like to have a dashboard with 3 TimeRangePickers, one for each subsearch.
Any idea how I could do this using sideview utils?
... View more