Hi All, I am populating the summary index from yesterdays data via tstats count on a Data model and inspite of adding the addTime=t, the query is updating the time from _raw i.e. today instead of yesterdays date. My query is as below : | tstats count AS "Trip Count" FROM datamodel=ourdatamodel where Condition | Collect index=xyz sourcetype=abc addTime=T (time parameter given in the scheduled report is -1d@d till @d) When I tried extracting the info_min_time to check whether this parameter is available through (The documentation states the collect command will look for info_min_time and if it is not present, then it will look for _time) | tstats count AS "Trip Count", earliest(info_min_time) FROM datamodel=ourdatamodel ....... I am not getting any value for this field in the result. Can you please suggest why inspite of adding addTime=T, we are not getting date as yesterday's date ? Thanks AG.
... View more