Dashboards & Visualizations

new time calculated by the time received from the dashboard timepicker?

jihoon
New Member

test

<input type="time" token="time_tok" searchWhenChanged="true">
  <label>test</label>
  <default>
    <earliest>03/10/2015:00:00:00</earliest>
    <latest>03/10/2015:24:00:00</latest>
  </default>
</input>



  <table id="detail">
    <title>here --> earliest=$tok.earliest$ ( -calcul ) latest=$tok.latest$ ( -calcul ) </title>   //here
    // From 3 days from the time defalut input method to calculate until yesterday.
    // ex) here --> 03/07/2015:00:00:00 03/09/2015:24:00:00

...

Is it possible in xml?

Tags (2)
0 Karma

woodcock
Esteemed Legend

If you are talking about doing something inside a search string, you can use relative_time like this:

| eval next_time=relative_time($time_tok.latest$,"-3d")

Perhaps your confusion is that your input is using time_tok but your title is using $tok$ (instead of `$time_tok$)?

0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...