Hi!
When you set the time ticker with "<input type = time xxxx" in dashboard
and also set the time modifier in "<searchTemplate" for each panel,
is it correct to understand the setting in each panel overrides the setting in the fieldset?
I did a test and seems that each setting in the panel is prioritized within splunk.
Thanks,
Yu
Yes, I think it basically the time range which is set on search directly takes precedence in version 5.
However, if you set the time earlier than the one on the search, it doesn't follow the time range which is set in the search.
Here is my result.
Search: earliest=-7d@d latest=@d index=A sourcetype=B | timechart count by type
I hope it helps you a bit.
Hello appleman.
Thanks for taking your time. I appreciate your time.
My plan is to specify "All time" in search and
specify flexible time from the time ticker.
Goal is to fetch all the event from index for specific sub search.
I will take a look as well.