I add a global variable like below ` globalvariable <query> | makeresults | eval var="D:\ALM-Splunk-Delivery\Reports\Project_Area_1\CRS_Requirements\data.csv" <preview> <set token="source1">$result.var$</set> </preview> ` I want to pass $source1$ as variable in report as below <single> <title>count with date</title> <search> <query> index="newindex" source="$source1$" |stats count</query> </search> </single> ... View more

i find epoch time from my token $date1$ using below code index="cdq-dashboard-dev"|eval earliest="$date1$"| convert timeformat="%Y-%m-%d" mktime("earliest")|convert num("earliest")|eval latest=earliest+86400|convert num("latest")|eval earliest-time=tostring(earliest)|eval latest-time=tostring(latest)|dedup earliest-time |table earliest,latest,latest-time,earliest-time then get the epoch vale in string as well as number. i want to filter using epoch value like below but its not working $epoch_earliest$ $epoch_latest$ but its not working ... View more