Re: EventTime as Dashboard Timepicker Field - No Results
Posted: Thu Oct 19, 2017 2:00 pm
The field is expecting and working with strings as mcapra suggested. Add the following filtering under Administration > Global Configuration > Filters:
This will create a new date field called event_time that you can then use.
Code: Select all
if [type] == 'eventlog'{
date {
match=> ["EventTime", "YYYY-MM-dd HH:mm:ss"]
target => 'event_time'
}
}