I want to perform a search query which can give me results with respective to a specific time.
For example i have a particular time as this: 2022-07-29 18:33:20
My query:
index="*" sourcetype="pan:threat" 10.196.246.104 url=* earliest=relative_time("2022-07-29 18:33:20","-1h") AND latest = relative_time("2022-07-29 18:33:20","+1h") | stats values(url) as url by _time,dest_ip,dest_port,app,category,rule,action,user
I am not getting appropriate results with this, can anyone suggest how i can do the filtration on the basis of a particular time.
... View more