locked
How can I get Local time from TimeGenerated field for log query ? RRS feed

  • Question

  • I want to get min(TimeGenerated) value of Heartbeat by 1DAY of Japan local time.
    Which mean Power ON Time of pc per DAY.

    Now, I can get it by 1DYA by GMT.

    Type=Heartbeat | measure min(TimeGenerated) as MIN interval 1DAY

    and I try some queries, that became ERROR.

    Just like:

    Type=Heartbeat | EXTEND TimeGenerated+9HOUR as JST | measure min(JST) as MIN interval 1DAY, etc.

    How can I get local time from TimeGenerated field ?

    Regards,
    Yoshihiro Kawabata

    Monday, January 16, 2017 3:08 AM