Hi,
I have already refereed the same link and developed the below Query.
index="way" sourcetype="transactions" source="/transactionlog/*"
| transaction fields=MessageId keepevicted=true
| stats min(_time) AS startDate, max(_time) AS endDate | convert timeformat="%F %T" ctime(*Date)
| eval max=strftime(max, "%Y-%m-%d %T")
| eval DUBAIS= strptime(startDate, "%Y-%m-%d %T") +32400
| eval DUBAIE= strptime(endDate , "%Y-%m-%d %T") +32400
| eval DUBAI_START_TIME= strftime(DUBAIS, "%Y-%m-%d %H:%M:%S")
| eval DUBAI_END_TIME= strftime(DUBAIE, "%Y-%m-%d %H:%M:%S")
| table DUBAI_START_TIME DUBAI_END_TIME
Problem which i'm facing,
How can i able to give the above query in multi-select.
I need to choose both the values need to be there in the filter.
When i choose that value it need to be reflected for entire dashboard.
Can u kindly give your valuable sugestion
Thanks in advance
... View more