continuous monitoring

[harinivgr]

I have a log file(which is a notepad) i have indexed that log file as continuous monitoring. But whenever i add or remove data in log file, the new data is getting appended in index, But i want only recent data to be displayed. Is there any other way other than selecting time range from time picker?

[renjith_nair]

@harinivgr ,

Do you have fields or do you want to see the _raw ? Do you have timestamps associated with the events or how do you identify the recent event?

You should be able to get it by stats latest()