I need to schedule a report which runs dbquery, but I need that report to run with a variable in the query e.g.
| eval myVar=stuff
| dbquery source "select * from table where timestamp >= '".myVar."'"
Or something like that, but of course this doesn't work since dbquery must be the first command of a search.
Has anyone come across this before or found a way around it?
↧