I'm unable to get this search to output anything except the _time of the first search:
anyway it's a logfile that timestamps when the backgroundworker sub starts a routine followed by another entry where it ENDs. It happens multiple times per source so dedup being used in this way probably isn't the best idea. There are many difference sources being indexed each with a unique name. Is this the way to do this? Thanks in advance.
asked 23 May '12, 14:51
will probably get you the right results efficiently. Otherwise:
should get you the same as what you appear to intend.
answered 23 May '12, 17:09