I would like to compare events from two different custom time ranges. If I put two timerange modules in a panel, how could I get the values of those, to populate the earliest and latest variables in the outer and inner searches?
Splunk 6.1 supports this in Simple XML fully through the UI editor.
- click add form input > time (and repeat)
- configure unique tokens for each time picker
- within the respective search editors, select the corresponding time range picker to bind to
Splunk 6.1 supports this in Simple XML fully through the UI editor.
- click add form input > time (and repeat)
- configure unique tokens for each time picker
- within the respective search editors, select the corresponding time range picker to bind to
Hi,
you have labelled this question as advanced XML. Do you need advanced XML? Or could you switch to HTML instead?
Using HTML you could easily duplicate the time range picker and use different token names for both instances.
Cheers
Norbert