About mattheuslima

mattheuslima · ‎07-27-2020

It work!! Thank you !!!!

mattheuslima · ‎07-24-2020

Hi, @isoutamo . Thanks for answer! Unfortunately it doesn't work. I got this as an answer "Error in 'eval' command: The expression is malformed. Expected AND."

mattheuslima · ‎07-23-2020

Hello, Folks. I have a field that represents a date but in this format (YY/MM/DD). For example: on 07/23/20 the field value will be 200723. I need to transform this value into a date (DD/MM/YY). I tried to use: | eval MyDateEpoch=strptime(MyDate,"%Y%m%d") but doesn't work. Can you help me ?

mattheuslima · ‎06-02-2020

Hi,folks. I trying timechart the average duration but the I'm not get the average values for all spa's of times. The query is like this: " (index=a) OR (index=b) |transaction Reg_ID|search eventcount=2 |bin _time span=1m |timechart avg(duration) as media (DATE RANGE 15 MIN) But it only show the result for 5 min,for example . Even when I make the average with the stats sum and c. I can clarify it if more with you need. Tks for help!

mattheuslima · ‎03-23-2020

I running a subsearch where i use a ID to find events from the index B in the index A. What I want to do is: list the ID's from the index B that was not found in the index A The subsearch structure is : search index=A search index=B |table ID's How can I list the ID's that wasn't found?

Posts	5
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎03-23-2020

Online Status	Offline
Date Last Visited	‎08-25-2020 08:53 PM

How to convert a number into a Date?

Problems with average duration

Subsearch: How can we only see results when they a...

Re: How to convert a number into a Date

Re: How to convert a number into a Date

How to convert a number into a Date?

Problems with average duration

Subsearch: How can we only see results when they a...