Dashboards & Visualizations

One of the panels in dashboard is not getting connected and updating the values through shared time picker

khojas02
Engager

I have panel which performs the look up on the csv file and have the additional code as below.

| eval _time=strptime(date,"%m/%d/%Y")
| where _time>=relative_time(now(),"-1q")

Now currently I have hard coded the the time range for last quarter data. When I tried to connect this panel to the Shared Time Picker, the values weren't getting updated as per the collection.

You advice would be appreciated!!

Tags (1)
0 Karma

niketn
Legend

@khojas02 if you are using Splunk's Time Picker input then you can either use <change> event handler with <eval> to format selected time to epoch or string time as per your final format or use independent search to pass time picker inputs and use addinfo in the SPL to get the time as epoch or string as per your need and pass the same as token to your search. Both the approaches have been explained in one of my previous answers. Please refer to the same to understand each approach: https://answers.splunk.com/answers/578984/running-one-of-two-searches-based-on-time-picker-s.html

PS: While using string time ensure you have time in format ensure %Y/%m/%d format so that data remains sorted and filter can also be applied correctly on string time.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

to4kawa
Ultra Champion

It looks like date is fixed value.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...