Dataset: Get Interval

Hi, we have predefined $day_of_month and $day_of_week, please check it out.

Regards,

hz

I'm trying to do something like that:

select now() - from_dtime(dtime) as interval, devid, msg from $log where msg like 'Fortigate started' and subtype='system' and level='information' and msg is not null ORDER BY interval DESC limit 1

But when I print "now()", I'm getting a date without timezone.

Great!

It worked really fine.

Another doubt...

How can I ignore "Time Period" ?

It's because I need to search for every single log message referring to the "Fortigate started", regardless of the "Time Period" setted.

Any ideas? 

Ok. The query looked like this:

select to_char( (now() - from_dtime(dtime) ), 'DD') as interval, devid, msg from $log where msg like 'Fortigate started' and subtype='system' and level='information' and msg is not null and $filter ORDER BY interval ASC limit 1

Is possible to create a condition, for example, if the Days be more than 90 days or N/A then print 'More than 90 days' instead of printing the number of the days? But if it less than 90 days, keep showing in Days.

It worked fine.

But if I can't find anything, I would like to print "More than 90 days".

Good point.

So, I'll remove "and msg is not null".

But, I'm still wondering if could be possible to print a message if we didn't find anything.