Hello, I am using simple XML to construct a dashboard using a searchTemplate with a timepicker.
My questions is, can you have multiple timepickers on the same dashboard?
Id like to have 3 charts running the same search on different dates/times.
Thanks!
This is possible. I do the exact same thing on various dashboards i have built for my team. I recommend switching over to advanced xml.
http://docs.splunk.com/Documentation/Splunk/4.2/Developer/AdvancedSearch
Essentially, you'll have 3 different charts where the TimeRangePicker module is going to be the parent module. All other modules, including your search modules will be child modules.
I highly recommend reading the docs, then download the Splunk UI examples app and go through all of the examples. Advanced xml is actually pretty easy once you get the hang of it. And once you do, download the sideview utils app as well. It will make coding advanced form searches 100 times easier.
Please see the answers to this question for examples on how to achieve this both in simple an advanced XML: http://splunk-base.splunk.com/answers/12787/dynamic-dashboard-time-range-span-and-others
Thanks.. I will focus on the advanced XML. Reading the example on the simple, I dont think its possible.. There is no example for doing what I need on simple.