original without your change:
| dbquery "DB" limit=100000 "select * from generic_data_hist" series=$series$.
| eval _time = UPDATE_TIME
| transaction OBJECT_KEY FIELD_NAME keeporphans=true maxspan=1s maxevents=2
| eval OPERATION_RESULT=if(OPERATION=="INSERT" AND OPERATION=="DELETE","UPDATE",OPERATION)
| sort TYPE_NAME, OBJECT_KEY, FIELD_NAME,
| table _time, TXN_ID, OPERATION, OPERATION_RESULT, VERSION, TYPE_NAME, OBJECT_KEY, FIELD_NAME, FIELD_VALUE
| search OBJECT_KEY = "*$series$*"
with your changes:
| dbquery "" limit=100000 "select * from generic_data_hist" series=$series$.
| addinfo
| convert auto(UPDATE_TIME)
| where (info_min_time < UPDATE_TIME AND info_max_time > UPDATE_TIME)
| transaction OBJECT_KEY FIELD_NAME keeporphans=true maxspan=1s maxevents=2
| eval OPERATION_RESULT=if(OPERATION=="INSERT" AND OPERATION=="DELETE","UPDATE",OPERATION)
| sort TYPE_NAME, OBJECT_KEY, FIELD_NAME,
| table _time, TXN_ID, OPERATION, OPERATION_RESULT, VERSION, TYPE_NAME, OBJECT_KEY, FIELD_NAME, FIELD_VALUE
| search OBJECT_KEY = "*$series$*"
... View more