Table of Contents | ||||
---|---|---|---|---|
|
...
How does it work in the search window?
Select Create field in the search window toolbar, then select the Tomorrow operation.
This operation can be applied with no arguments. In this case, you will get the start time of the current day considering your current time zone. If you add the Time zone argument, you can specify a timezone different than your current one to see the time your time zone presents when the following day starts in the specified time zone. When assigning a time zone different to yours, pay special attention to the original timestamp of the event, as the result may imply a day shift in the time zone specified.
Argument | Data type | Description | ||
---|---|---|---|---|
Time zonemandatory | string | You need a valid string format the app can recognize so it returns meaningful results. If you leave the field empty or introduce a value the app cannot recognize, the default Time Zone is UTC. You can use one of the following methods:
|
The data type of the new field values is timestamp.
Info |
---|
Be aware that in some time zones they set the clock forward during summer and thus the results will be altered. For example, Europe/Madrid (CET-Central European Time), which is UTC+1, becomes UTC+2 during summertime. Performing this operation during summer with that time zone selected as your own or using it as an argument will affect the results. Be also aware that summertime differs between the Northern and Southern Hemispheres. |
Example
In the siem.logtrust.web.activity
table, we want to create a field showing the start time of the following day (today is January 16thApril 24th) taking as reference the EET EEST (Eastern European Summer Time, UTC+23) and considering we are in CET CEST (Central European Summer Time, UTC+12). To do itthis, we will create a new field using the Tomorrow operation.
The arguments needed to create the new field are:
Time zone - EETEEST
...
Click Create field and you will see the following result:
The new field shows that when the following day (January 17April 25th) started in EET EEST (Eastern European Summer Time, UTC+23), it was 23 hours of January 16April 24th in CET CEST (Central European Summer Time, UTC+12).
...
How does it work in LINQ?
...
tomorrow()
→ Use this expression to get the start time of the following day, according to your current time zone.tomorrow(timezone_string)
→ Use this expression to get the start time of the following day, according to the specified time zone.
Example
You can copy the following LINQ script and try the above example on the demosiem.logtrust.ecommerceweb.dataactivity
table.
Code Block |
---|
from demosiem.logtrust.ecommerceweb.dataactivity select tomorrow("EETEEST") as Tomorrowtomorrow_start_EETEEST |