How search for endTime

[ftavares]

Hi,

i was trying to make a serch query using the endTime field as parameter in my ArcSight Logger v5.3, I want a search on a specific date.

The problem is that this field also has time information (hour/minute/seconds), so, the query did not match.

Is there anyway to acomplish that query against a specific date, ignoring any hour/minute information inside the field??

Thanks all.

[ftavares · Accepted solution]

Hi, I could solve this necessity with this query:

"CUSTOM QUERY" AND endTime > "Start Date" and endTime < "End Time" | cef endTime | sort endTime

It makes my result sorted by endTime field.

Even with the refered filed containing strings about TimeZone, the query runned OK and showed me desired result.

Thanks all.

[jring1]

Thanks for sharing...

Joachim