Goal: Build a custom alert with a query that occurs if an event occurs on a specific date.
This query is working. It alerts if an event occurs during certain hours. Tested and working.
where(timestamp=/.T(02|03|04|05|06|07|08|09|10|11|12)./ source_json.eventName=“XXXXX”)
I want a separate alert to happen if an event occurs on a certain date regardless of time of day. I’ve tried below and they are not working.
where(time > “2023-07-04T00:00:00Z” AND time < “2023-07-04T23:59:59Z”)
where(timestamp > “2023-07-04T00:00:00Z” AND timestamp < “2023-07-04T23:59:59Z”)
where(timestamp>=2023-07-04T00:00:00Z AND timestamp < 2023-07-04T23:59:59Z AND source_json.eventName="XXXXX)
where(timestamp >= “2023-07-04T00:00:00Z” AND timestamp < “2023-07-04T23:59:59Z” source_json.eventName=“XXXXX”)
where(timestamp >= to_milliseconds(“2023-07-04T00:00:00Z”) AND timestamp < to_milliseconds(“2023-07-04T23:59:59Z”) AND source_json.eventName=“XXXXX”)
Any ideas?