Hi i have an extracted field from regex ie;Time_extract which gives hour ,Now i want to get the logs between a period of time ie; time_extract>=10 AND time_extract<23 ..how to go about that
s search Date_extract="10/29/16" | stats count by severity | where Time_extract>=12 AND Time_extract<23
↧