-1@h now
Events sourcetype = * | table host docker.container_id kubernetes.pod_name _raw $myTime.earliest$ $myTime.latest$ ["host","docker.container_id","kubernetes.pod_name","_raw"] https:///#/integration/landing;config=$row._raw$