Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

inputlookup search timerange

$
0
0

Hello,I have created a csv similar to the one present on the musicdashboard tutorial

"_time", "origin", "destiny" .. "1384792901.868352", "example", "example" ..

and then I created the following searchmanager

{% searchmanager id="search-newsource" search='| inputlookup newsource.csv | search origin=$originatorKey$ OR destiny=$recipientKey$ cache="False" earliest_time="$et$"|token_safe latest_time="$lt$"|token_safe %}

and the timerange is defined like this:

{% timerange id="timeKey" earliest_time="$et$"|token_safe latest_time="$lt$"|token_safe %}

Am I doing something wrong? This does not work.


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>