Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Dynamic Time custom field

$
0
0
Hi, I have a problem on a dashboard, I have to create a timechart dashboard on a custom field (that is not index time) and add also a timing filter on this custom field. I have created the dashboard in the following way: | eval _time=strftime(myfield,....) | timechart ... But when I add input time and filter it filter on original _time and not new time. Please let me know. Thanks, Aniello

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>