Dashboards & Visualizations

Can we give a predefined time for the time picker control ??

rakesh_498115
Motivator

Hi .

Can i give the default values for the splunk timepicker control ?? . or is it possible to disable last 30 days and alltime ,other and custom time options in the available timepicker control.. ???

Please help .thnx..

Tags (2)
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

I know you can create custom time ranges but not sure about removing them. I'll look deeper in a bit

times.conf

View solution in original post

alacercogitatus
SplunkTrust
SplunkTrust

I know you can create custom time ranges but not sure about removing them. I'll look deeper in a bit

times.conf

alacercogitatus
SplunkTrust
SplunkTrust

Why, thank you piebob!

0 Karma

piebob
Splunk Employee
Splunk Employee

for your patience, i accepted your answer alacer 🙂

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

The default is in $SPLUNK_HOME/etc/system/default/times.conf. You will want to copy that to $SPLUNK_HOME/etc/system/local/times.conf and make your changes there. If your question has been satisfactorily answered, please accept the answer.

0 Karma

rakesh_498115
Motivator

ok thank you so much for info ..where will be the default times.conf file then ??

0 Karma

sowings
Splunk Employee
Splunk Employee

To disable all of the defaults (you'd have to provide your own full list), use

[default]
disabled = True

To just disable a single one of the defaults, replace its disabled flag in your own copy of times.conf by creating a matching stanza, then setting disabled = true:

[last_30_days]
disabled = True

Your own times.conf should go in the local/ subfolder of your custom app.

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Well, from the documentation, for 30 minutes you'd have a stanza such as:

[last_30_minutes]
label = Last 30 minutes
header_label = in the last 30 minutes
earliest_time = -30m

You would change this stanza to match what times you want. Please see the times.conf documentation for more information. I don't see a way to remove them.

0 Karma

rakesh_498115
Motivator

Hi..

Can i have an example for this please ..I need the following times to be used with the timepicker ..

last 30 min
last 60 min
last 24 hrs
last 7 days
last 10 days

how can i define them .. Once you gone through the documention..can you please post a answer for my question ..

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...