I'm trying to pass the time parameter from an event clicked in one dashboard, into another dashboard. The receiving dashboard will display a 10 minute window (earliest=5 minutes preceding the event, latest=5 minutes after the event).
I'm using the following parameters (form.field1 is a time picker):
form.field1.earliest = $row._time$-300s
form.field1.latest = $row._time$+300s
I find that the time value is being passed over, but +-300s / 5m / etc. does not get evaluated, only appended to the time string.
I found an answer for this here:
https://answers.splunk.com/answers/438520/how-to-pass-time-range-values-in-a-drilldown.html