I am working on using the same time range as an argument used in the Time range picker.  how do I do that? |metadata index=* type=hosts|eval First_Time=strftime(firstTime, "%Y-%d-%m %H:%M") This is my search query and I need the "firstTime" values to be the same value as used in the search head (i.e) if this search is run from 1st Nov to 30th Nov, I need the firstTime values also in this specified time range as given in the time-range picker. ... View more

Hi, I've added a new row to an existing lookup file for testing the query and now I need to delete the last couple of rows to retain it to its original form. Is that possible, and if yes, please give me a solution!!!   Thanks in advance!   ... View more