Hi
When search in Asset Authentication Logs, is there a way to get the firstseen/lastseen using the timestamp field?
where("destination_account" = "user1" and "logon_type" != "NETWORK")calculate(min:"timestamp")
Hi
When search in Asset Authentication Logs, is there a way to get the firstseen/lastseen using the timestamp field?
where("destination_account" = "user1" and "logon_type" != "NETWORK")calculate(min:"timestamp")
Unfortunately not, the min operator only works for integers not timestamps.
The next best thing would be to use the sort order mode to sort the logs from newest to oldest or oldest to newest, left of the time picker in log search