Hello
Is it possible to use a select time range directly in a timechart?
it means that I would like to use the select time range between tags
i would also like to have the possibility to modify the span value directly in the panel
could you help me pelase
hi mate,
just double checking my understanding. Do you want the "earliest and latest" to be modified dynamically or . "span" within timechart?
In dashboard, each of them can be put as a token in drop down (or any fields)
=> For earliest and latest, you need to amend at base search level
index=* sourcetype=somesourcetype earliest=$myearliest$ latest=$mylatest$ | timechart ...
=> If you want to amend span, then do the same for $span$
index=* sourcetype=somesourcetype | timechart span=$myspan$ count by something
https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/tokens
HI
Thanks but my exact question is to know if its possible to "play" with earliest=$myearliest$ latest=$mylatest$ or span=$myspan$ directly in the timechart???
Take a look here. There are examples within demonstrating the behaviour I believe you are after
Where is the link?
Sorry, for some reason it was taken off my answer. https://docs.splunk.com/Documentation/Splunk/latest/Viz/Chartcontrols