<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Custom time range picker (first quater...) in Splunk Dev</title>
    <link>https://community.splunk.com/t5/Splunk-Dev/Custom-time-range-picker-first-quater/m-p/56424#M734</link>
    <description>&lt;P&gt;Yes - you can do it by editing the configuration file - times.conf. Or, you can go into Splunk Manager » User interface » Time ranges and create a new time range there. You should be careful and look at the documentation for times.conf.&lt;/P&gt;

&lt;P&gt;Here is a link to &lt;A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/User/ChangeTheTimeRangeOfYourSearch"&gt;Change the time range...&lt;/A&gt; in the Splunk User manual.&lt;/P&gt;

&lt;P&gt;You could set something like this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[ByQuarters]
label = By Quarters
order = 300
is_sub_menu = 1

[quarter_to_date]
label = Current quarter to date
header_label = from the first day of the quarter
earliest_time = @q
latest_time = now
order = 310
sub_menu = By Quarters

[LastQuarter]
label = Last Quarter
header_label = from beginning of previous quarter to the beginning of this quarter
earliest_time = -1q@q
latest_time = @q
order = 320
sub_menu = By Quarters

[q1]
label = First Quarter this Year
header_label = from January 1 through March 31
earliest_time = @y
latest_time = @y+1q
order = 330
sub_menu = By Quarters

[q2]
label = Second Quarter this Year
header_label = from April 1 through June 30
earliest_time = @y+1q
latest_time = @y+2q
order = 340
sub_menu = By Quarters

etc
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Tue, 11 Sep 2012 07:30:50 GMT</pubDate>
    <dc:creator>lguinn2</dc:creator>
    <dc:date>2012-09-11T07:30:50Z</dc:date>
    <item>
      <title>Custom time range picker (first quater...)</title>
      <link>https://community.splunk.com/t5/Splunk-Dev/Custom-time-range-picker-first-quater/m-p/56422#M732</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;
is possible first quater, second quater.. insert to into time range picker?&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;
thank you&lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 11 Sep 2012 06:17:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Dev/Custom-time-range-picker-first-quater/m-p/56422#M732</guid>
      <dc:creator>khyoung7410</dc:creator>
      <dc:date>2012-09-11T06:17:18Z</dc:date>
    </item>
    <item>
      <title>Re: Custom time range picker (first quater...)</title>
      <link>https://community.splunk.com/t5/Splunk-Dev/Custom-time-range-picker-first-quater/m-p/56423#M733</link>
      <description>&lt;P&gt;you can set custom configurations in &lt;A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/admin/Timesconf"&gt;times.conf&lt;/A&gt;, place a times.conf in &lt;CODE&gt;$SPLUNK_HOME/etc/system/local/&lt;/CODE&gt; or in &lt;CODE&gt;$SPLUNK_HOME/etc/apps/&amp;lt;your_app&amp;gt;/local/&lt;/CODE&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 11 Sep 2012 07:27:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Dev/Custom-time-range-picker-first-quater/m-p/56423#M733</guid>
      <dc:creator>MarioM</dc:creator>
      <dc:date>2012-09-11T07:27:41Z</dc:date>
    </item>
    <item>
      <title>Re: Custom time range picker (first quater...)</title>
      <link>https://community.splunk.com/t5/Splunk-Dev/Custom-time-range-picker-first-quater/m-p/56424#M734</link>
      <description>&lt;P&gt;Yes - you can do it by editing the configuration file - times.conf. Or, you can go into Splunk Manager » User interface » Time ranges and create a new time range there. You should be careful and look at the documentation for times.conf.&lt;/P&gt;

&lt;P&gt;Here is a link to &lt;A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/User/ChangeTheTimeRangeOfYourSearch"&gt;Change the time range...&lt;/A&gt; in the Splunk User manual.&lt;/P&gt;

&lt;P&gt;You could set something like this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[ByQuarters]
label = By Quarters
order = 300
is_sub_menu = 1

[quarter_to_date]
label = Current quarter to date
header_label = from the first day of the quarter
earliest_time = @q
latest_time = now
order = 310
sub_menu = By Quarters

[LastQuarter]
label = Last Quarter
header_label = from beginning of previous quarter to the beginning of this quarter
earliest_time = -1q@q
latest_time = @q
order = 320
sub_menu = By Quarters

[q1]
label = First Quarter this Year
header_label = from January 1 through March 31
earliest_time = @y
latest_time = @y+1q
order = 330
sub_menu = By Quarters

[q2]
label = Second Quarter this Year
header_label = from April 1 through June 30
earliest_time = @y+1q
latest_time = @y+2q
order = 340
sub_menu = By Quarters

etc
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 11 Sep 2012 07:30:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Dev/Custom-time-range-picker-first-quater/m-p/56424#M734</guid>
      <dc:creator>lguinn2</dc:creator>
      <dc:date>2012-09-11T07:30:50Z</dc:date>
    </item>
    <item>
      <title>Re: Custom time range picker (first quater...)</title>
      <link>https://community.splunk.com/t5/Splunk-Dev/Custom-time-range-picker-first-quater/m-p/56425#M735</link>
      <description>&lt;P&gt;Hello lguinn &lt;BR /&gt;
Thanks for the quick response.&lt;/P&gt;</description>
      <pubDate>Wed, 12 Sep 2012 00:35:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Dev/Custom-time-range-picker-first-quater/m-p/56425#M735</guid>
      <dc:creator>khyoung7410</dc:creator>
      <dc:date>2012-09-12T00:35:52Z</dc:date>
    </item>
  </channel>
</rss>

