Skip to main content
Contributor
June 4, 2020

Technical Note: [FortiSOAR / Cybersponse Tricks'n'Tips] Workaround to filter between to dates

  • June 4, 2020
  • 0 replies
  • 709 views
Description

As of now, there is  no way to filter based on two dates given as an input (Ex: alerts between 1/1/2019 00:00:00 to 10/1/2019 00:12:00),

However, there is a workaround that can help us to solve this issue:


Steps:

  1. Create a new INTEGER field called Time Stamp.
  2. Add post create step tp update this field by the current timestamp (  {{arrow.utcnow().timestamp}}  ). Note: to change it to specific timezone we need to add .to(timezone) (Ex:    {{arrow.utcnow().to('Asia/Dubai').timestamp}}   )
  3. use integer filtering feature (greater than/less than) to filter between two timestamps.