Hi,
earliest and latest are in the "relative time" notation of Splunk.
So I would like to use the label in a panel. E.g. "Yesterday" Or "Last 7 Days".
Is that possible? If yes, how?
Kind regards,
Jens
Hi JensT,
the only way is to create a lookup with all the time definitions you used.
I understand that it isn't so easy to manage, but after the first time you can re-use it many times!
Bye.
Giuseppe
You can add time input to your dashboard as below which provides you with the default time picker what you see in search app that has what you are asking
-24h
now
Hi,
sorry, seems my wording was bad.
I have a timepicker, but want to use the label in a different panel.
Example: 500 Events 'Yesterday'
Regards,
Jens