You can add a single value panel as mentioned below to get the search timeline.
<dashboard>
<label>ShowSearchDate</label>
<description/>
<row>
<panel>
<single>
<searchString>|gentimes start=-1 | addinfo | convert ctime(*) | eval reportDate=info_min_time." to ".info_max_time | table reportDate</searchString>
<earliestTime>-60m@m</earliestTime>
<latestTime>now</latestTime>
<option name="drilldown">none</option>
<option name="beforeLabel">Report Date:</option>
<option name="linkView">search</option>
<option name="afterLabel">.</option>
</single>
</panel>
</row>
<row>
<panel>
<chart>
<title>Internal Sourcetype Distribution Report</title>
<searchString>index=_internal | stats count by sourcetype</searchString>
<earliestTime>-60m@m</earliestTime>
<latestTime>now</latestTime>
</chart>
</panel>
</row>
</dashboard>
The above is mentioned for dashboard , what if I want to print time range in report.
Agreed. A solution for a report would be ideal.
Can anyone help mention the solution? Like how to display the time-range for which the search was run on a PDF report.
Thanks.
I have the same question, @ppablo_splunk, @thambisetty, do you guys have an answer to this?
Thanks!
Hey @ateterine
Unfortunately I don't know how to do this, but I edited the title and clarified the content so hopefully some PDF reporting experts will be more inclined to chime in 🙂
Patrick
I want to display the time range used for the search that generated the data and description also on the PDF
Hi @thambisetty
Do you want to display the time range used for the search that generated the data on the PDF? or the time it took to actually generate the PDF itself?