Changing the main query time when I make the Dashboard subquery had to change around the time of the day in the main query time.
For example)
index="korea" earliest=-7d@d latest=-6d@d | ....
| join foo [index= "USA" {ealiest=main query earliest -1 latest= main query earliest}] { } <-Should I change automatically?
I use javascript
help me !
thank you 고맙습니다.
Hi,
Try this:
index="korea" earliest=-7d latest=-6d | ....
| join foo [index= "USA" {ealiest=main_query_earliest -1 latest= main_query_earliest}]
Let me know if it has help you.