Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

how to add dynamic conditions?

$
0
0
I want to add dynamic conditions. When June 2018, the query condition was " |search searchDate = 201806 createDate !=“2018/07" "to return n data. When July 2018, the query condition was " |search createDate =“2018/07" " to return 2n data. It is important to complete in a query. for example If now()==201806 | search searchDate = 201806 createDate !=“2018/07" If now() == 201807 | search createDate =“2018/07" thanks very much

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>