search

airpwn / enterprise-log-search-and-archive

Automatically exported from code.google.com/p/enterprise-log-search-and-archive
0 stars 0 forks source link

Using interval to calculate the time difference between two log records #220

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
I have just stared using Elsa and i want to calculate the time difference 
between two specific logs. I tried to use interval in the query but it does not 
seem to work.

i tried to use interval - >   keyword | interval
interval |keyword
interval(keyword,keyword)

Can somebody tell me how to use it or is it an issue?

Errors: Can't locate object method "data" via package "Transform::Interval" at 
/usr/local/elsa/web/lib/Transform/Interval.pm line 18. 
Warnings: failed to find transform interval, only have transforms 
Transform::Anonymize, Transform::CIF, Transform::Count, Transform::DNSDB, 
Transform::Database, Transform::Filter, Transform::GeoIP, Transform::Grep, 
Transform::Has, Transform::Interval, Transform::Local, Transform::Parse, 
Transform::Remote, Transform::ScanMD5, Transform::ScanMD5::ShadowServer, 
Transform::ScanMD5::VirusTotal, Transform::Sum, Transform::Whois
Field Summary

Original issue reported on code.google.com by xar...@gmail.com on 17 Jul 2014 at 7:02