cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Who rated this post

L5 Sessionator

Hello @S.Ahmad ,

 

 

Thanks for reaching out on LiveCommunity!

 

Please refer to below query:

preset = host_inventory_applications
| fields application_name , vendor , version , endpoint_name, install_date
| alter aa = parse_timestamp("%Y-%m-%d", format_string("%s",install_date ))
| alter diffdiff = timestamp_diff(current_time(), aa, "DAY")
| filter diffdiff <30

 

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.

Ashutosh Patil

View solution in original post

Who rated this post