I have a custom dropdown which defines report dates. For example, there is 9/1/2016 which is a September report spanning from 9/1-9/30.
If I wanted to search the internal index during this report range I thought I should try:
index=_internal earliest=strptime("9/1/2016","%m/%d/%Y")
However, I am given the error "Invalid value "strptime" for time term 'earliest'". Is there a way to pass a value to search earliest and latest without using the time picker?
↧