-
4 years, 8 months ago
vr2312 wrote a new post
| tstats latest(_time) as latest where index!=”*_” earliest=-9h by host index sourcetype
| eval recent = if(latest > relative_time(now(),”-360m”),”1″,”0″), LastReceiptTime = strftime(latest,”%c”)
| where […] -
9 years, 1 month ago
vr2312 became a registered member
