I have a saved search which I would like to pass a _index_earliest=XXX parameter to. I am trying to make a search that will give information based on a specified time that can be configured by calling the saved search and then entering the specified time. For example, the call might look something like | savedsearch saved_search_name _index_earliest=xxx . I am aware that you can do this with host, but I am having trouble trying to do this with a time. I would be joining this search with another search that uses a different time, which is why I simply can't use the time set options provided in the drop-down.
... View more