Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to create a dashboard from a lookup file that references a Time input field?

$
0
0
I am trying to create a dashboard from a lookup file that has fields: Ticket_ID Open_Date Close_Date Description I am having the hardest time trying to get the Time input field to reference the Open_Date so that it's easier to search for certain tickets between a certain date from a dashboard. I have tried **eval _time=Open_Date** but that didn't work for me. Any ideas? Below is a sample of the fields: Ticket_ID = 123 Open_Date = 9/4/2014 9:07:29 AM Close_Date = 9/5/2014 9:07:29 AM Description = This is an example.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>