Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Adding a date to a string Message

$
0
0
I am trying to create an error message based on a time frame, the last 15 min. and now. So the error message would say, "Client Missed file between 15:15:00 - 15:30:00" The times are calculated at the time of the search and the following search below fails as "Error in 'eval' command: Typechecking failed. '+' only takes two strings or two numbers." | eval 15MinEarly=strftime(relative_time(now(), "-15m"), "%m/%d/%Y %H:%M:%S") | eval Now=strftime(now(), "%m/%d/%Y %H:%M:%S") | eval ErrorMessage = "Client Missed file between: " + 15MinEarly + " - " Now How do you convert the two times to string so I can concatenate them into the error message?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>