Splunk Search

time range picker in Splunk 6.1.3 build 220630

Norling80
Path Finder

Hi, I´m trying to get the Time range picker to work in a test dashboards and in some cases it does work but not when I choose a manuel time under the Date & Time Range section.

Each element in the dashboard had already the predefined earliest/latest time from the original search that was saved to the dashboard in the first place, I guess they I need to change those.

The dashboard automatically added this when I added the TimePicker from the GUI:

  <label />
  <default>
    <earliestTime>0</earliestTime>
    <latestTime />
  </default>
</input>

any ides what I need to change to make it work?
/magnus

Tags (1)

jdwest1
Explorer

Time range picker is global if token is not defined.
Global time range picker is overridden by specific searches having declared time frames, either in xml or in the search string.
Being that you said all of your searches have those declared and the default is to include a token from the add input, It is an unused variable at the moment.

edit: I have the time range picker working in a global capacity by deleting the token="token" property and deleting any earilestTime and latestTime properties under and in a given search.
edit2: Below is for using the token.

<earliestTime>$local_time_pick.earliest$</earliestTime>
<latestTime>$local_time_pick.latest$</latestTime>

This got it working!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...