Hi,
I would like to display the label from the time field token from the time picker. I can display the value by using (timefield).earliest but it shows up as -24h@h which is sorta readable but not as good as Last 24 hrs. How can I display the label vs the value?
@dbcase case, please refer to one of my recent answers. Hope you are looking for the same: https://answers.splunk.com/answers/633356/whats-the-token-name-for-the-time-pickers-display.html
@dbcase case, please refer to one of my recent answers. Hope you are looking for the same: https://answers.splunk.com/answers/633356/whats-the-token-name-for-the-time-pickers-display.html
Hi Niketnialy,
This one worked perfect
<input type="time" searchWhenChanged="true">
<label>Enter time range</label>
<default>
<earliest>-1d@d</earliest>
<latest>@d</latest>
</default>
<change>
<set token="displayTime">($label$)</set>
</change>
</input>