Dashboards & Visualizations

How to select few options under TimeRangePicker

samsplunkd
Path Finder

Hi,

Is there a way to selectively show only few options available under "TimeRangePicker" module and not all the options? Like I only want to show "Last 15 minutes", "Last 4 hours" and "Custom time..." to the user when I use "TimeRangePicker" module in my dashboard.

Any help is greatly appreciated.

Thanks

Tags (1)
0 Karma

Drainy
Champion

Sure, you can use your own custom times.conf in an app or under the search app, the docs on it are here;
http://docs.splunk.com/Documentation/Splunk/latest/admin/Timesconf

With this you can define your own custom time ranges as well as the ones you want to be displayed to your end users.

tsmithsplunk
Path Finder

I'm not sure I get it. Is it possible to define time ranges that only apply to a certain module on a certain dashboard? It appears you are disabling the default ranges for all modules wherever they may appear.

0 Karma

samsplunkd
Path Finder

Thanks.So you are saying this should work?

cat //etc/apps//local/times.conf

[last_15_mins]
label = Last 15 minutes
header_label = in the last 15 minutes
earliest_time = -15m@m
latest_time = now
order = 10

[last_60_mins]
disabled=true

[last_4_hours]
label = Last 4 hours
header_label = in the last 4 hours
earliest_time = -4h@h
latest_time = now
order = 30

[last_24_hours]
disabled=true

[last_7_days]
disabled=true

[last_30_days]
disabled=true

[other]
label = Other
is_sub_menu = True
order = 200
disabled=true

[real_time_menu]
disabled=true

[all_time]
disabled=true

0 Karma

Drainy
Champion

To make sure the default ones are disabled you can explicitly set them as disabled, e.g.
[all_time]
disabled=true

0 Karma

samsplunkd
Path Finder

Thanks for the reply. I entered my options in times.conf and copied it under my app local folder but it still uses the default times.conf with all the options. Any idea what may be wrong in what I am doing?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...