Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Drilldown on search with strftime eval keeps opening blank search. I have tried different permutations encoding but it keeps opening a blank search.

$
0
0
search: | makeresults | eval lastModifiedTime = "1570536921" | eval lastModifiedTime = strftime(lastModifiedTime, "%Y-%m-%d %H:%M:%S") | table lastModifiedTime drilldown search?q=%7C%20makeresults%20%0A%7C%20eval%20lastModifiedTime%20%3D%20%221570536921%22%0A%7C%20eval%20lastModifiedTime%20%3D%20strftime(lastModifiedTime%2C%20%22%25Y-%25m-%25d%20%25H%3A%25M%3A%25S%22)%0A%7C%20table%20lastModifiedTime

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>