All Apps and Add-ons

How to set earliest and latest time based on timestamp minus/plus a static time?

SRF1LO
Engager

I know there are some similar questions asked and I've read through them, but none quite gives what I want.

Here is my problem:
I have one dashboard with several panels. On one of the panel which is a timechart, I have set the token to be the timestamp when the user randomly click on the chart. What I want to to achieve is that when the user click on the particular timestamp, another timechart on another panel should change the display to +/- 1 hour from the timestamp.

I know that the earliest and latest can be set to timestamp, but how to make them become +/-1 hour from the token value, like this:

<earliest>$timestamp$-3600</earliest>
<latest>$timestamp$+3600</latest>

But this does not work, so I am wondering whether is there any way for me to do it?

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...