<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: TimeRangePicker - Custom values in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28029#M1123</link>
    <description>&lt;P&gt;Thanks. Wouldn't this would affect the time-values displayed on all the dashboards/charts? The requirement is for each dashboard to display whatever time-values are appropriate for it. I've edited my post to include the per-dashboard subset of values criteria.&lt;/P&gt;</description>
    <pubDate>Wed, 11 Aug 2010 22:48:22 GMT</pubDate>
    <dc:creator>sranga</dc:creator>
    <dc:date>2010-08-11T22:48:22Z</dc:date>
    <item>
      <title>TimeRangePicker - Custom values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28027#M1121</link>
      <description>&lt;P&gt;Hi  &lt;/P&gt;

&lt;P&gt;I was wondering if its possible to only display a subset of the values provided by the &lt;CODE&gt;TimeRangePicker&lt;/CODE&gt;. Each dashboard could display its own subset of values.  &lt;/P&gt;

&lt;P&gt;For instance, I want to display just the &lt;CODE&gt;"Last 60 minutes"&lt;/CODE&gt;, &lt;CODE&gt;"Last 24 hours"&lt;/CODE&gt; and &lt;CODE&gt;"Last 7 days"&lt;/CODE&gt; on one dashboard and &lt;CODE&gt;"Month to date"&lt;/CODE&gt; and &lt;CODE&gt;"Year to date"&lt;/CODE&gt; on a different dashboard.  &lt;/P&gt;

&lt;P&gt;Thanks.  &lt;/P&gt;

&lt;P&gt;Ranga&lt;/P&gt;</description>
      <pubDate>Wed, 11 Aug 2010 05:14:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28027#M1121</guid>
      <dc:creator>sranga</dc:creator>
      <dc:date>2010-08-11T05:14:05Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker - Custom values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28028#M1122</link>
      <description>&lt;P&gt;These are defined in etc/system/default/times.conf&lt;/P&gt;

&lt;P&gt;You should probably copy this file to etc/system/local/times.conf and edit it there, so that you don't get screwed when you upgrade.&lt;/P&gt;</description>
      <pubDate>Wed, 11 Aug 2010 11:10:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28028#M1122</guid>
      <dc:creator>adamw</dc:creator>
      <dc:date>2010-08-11T11:10:51Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker - Custom values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28029#M1123</link>
      <description>&lt;P&gt;Thanks. Wouldn't this would affect the time-values displayed on all the dashboards/charts? The requirement is for each dashboard to display whatever time-values are appropriate for it. I've edited my post to include the per-dashboard subset of values criteria.&lt;/P&gt;</description>
      <pubDate>Wed, 11 Aug 2010 22:48:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28029#M1123</guid>
      <dc:creator>sranga</dc:creator>
      <dc:date>2010-08-11T22:48:22Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker - Custom values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28030#M1124</link>
      <description>&lt;P&gt;&lt;/P&gt;&lt;P&gt;I don't believe that it possible to do this with &lt;CODE&gt;TimeRangePicker&lt;/CODE&gt; directly. The cleanest solution is just to live with that limitation.&lt;/P&gt;

&lt;P&gt;&lt;/P&gt;&lt;HR /&gt;&lt;P&gt;&lt;/P&gt;

&lt;P&gt;If you really need this functionality, you could remove the &lt;CODE&gt;TimeRangePicker&lt;/CODE&gt; altogether, and just create multiple dashboards. This may be practical if the number is kept small. Then you can set the time range explicitly in the searches for each dashboard:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;module name="HiddenSearch"&amp;gt;
    &amp;lt;param name="earliest"&amp;gt;-24h&amp;lt;/param&amp;gt;
    &amp;lt;param name="search"&amp;gt;host=XXX termXXX&amp;lt;/param&amp;gt;
    &amp;lt;!-- Child modules go here --&amp;gt;
&amp;lt;/module&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;If doing this, you can also modify the nav.xml file to organize each group of similar dashboards into a single menu / submenu.&lt;/P&gt;

&lt;P&gt;&lt;/P&gt;&lt;HR /&gt;
If you &lt;I&gt;really&lt;/I&gt; need to have this selectable, one possible workaround would be to use a &lt;CODE&gt;StaticSelect&lt;/CODE&gt; and &lt;CODE&gt;ConvertToIntention&lt;/CODE&gt; modules to do string replacement in the search string - it would look something like this: &lt;P&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;module name="StaticSelect" layoutPanel="splSearchControls-inline"&amp;gt;
&amp;lt;param name="settingToCreate"&amp;gt;timerange_setting&amp;lt;/param&amp;gt;
&amp;lt;param name="staticFieldsToDisplay"&amp;gt;
  &amp;lt;list&amp;gt;
    &amp;lt;param name="label"&amp;gt;Last 60 Minutes&amp;lt;/param&amp;gt;
    &amp;lt;param name="value"&amp;gt;earliest=-1h&amp;lt;/param&amp;gt;
  &amp;lt;/list&amp;gt;
  &amp;lt;list&amp;gt;
    &amp;lt;param name="label"&amp;gt;Last 24 Hours&amp;lt;/param&amp;gt;
    &amp;lt;param name="value"&amp;gt;earliest=-24h&amp;lt;/param&amp;gt;
  &amp;lt;/list&amp;gt;
  &amp;lt;list&amp;gt;
    &amp;lt;param name="label"&amp;gt;Last 7 Days&amp;lt;/param&amp;gt;
    &amp;lt;param name="value"&amp;gt;earliest=-7d&amp;lt;/param&amp;gt;
  &amp;lt;/list&amp;gt;
&amp;lt;/param&amp;gt;
&amp;lt;param name="label"&amp;gt;Time Range:&amp;lt;/param&amp;gt;
&amp;lt;module name="ConvertToIntention"&amp;gt;
  &amp;lt;param name="settingToConvert"&amp;gt;timerange_setting&amp;lt;/param&amp;gt;
  &amp;lt;param name="intention"&amp;gt;
    &amp;lt;param name="name"&amp;gt;stringreplace&amp;lt;/param&amp;gt;
    &amp;lt;param name="arg"&amp;gt;
      &amp;lt;param name="timeFilter"&amp;gt;
        &amp;lt;param name="value"&amp;gt;$target$&amp;lt;/param&amp;gt;
      &amp;lt;/param&amp;gt;
    &amp;lt;/param&amp;gt;
  &amp;lt;/param&amp;gt;
  &amp;lt;param name="preserveParentIntentions"&amp;gt;true&amp;lt;/param&amp;gt;
  &amp;lt;module name="HiddenSearch" layoutPanel="panel_row1_col1" autoRun="True"&amp;gt;
    &amp;lt;param name="search"&amp;gt;$timeRange$ host=XXX termXXX&amp;lt;/param&amp;gt;
    &amp;lt;!-- Child modules go here --&amp;gt;
&amp;lt;/module&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 23 Sep 2010 01:13:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28030#M1124</guid>
      <dc:creator>southeringtonp</dc:creator>
      <dc:date>2010-09-23T01:13:30Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker - Custom values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28031#M1125</link>
      <description>&lt;P&gt;Thanks. Yes, this solution is what I was contemplating as well &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 30 Sep 2010 22:58:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28031#M1125</guid>
      <dc:creator>sranga</dc:creator>
      <dc:date>2010-09-30T22:58:03Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker - Custom values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28032#M1126</link>
      <description>&lt;P&gt;Any idea how this can be achieved for "Custom time..." in TimeRangePicker?&lt;/P&gt;</description>
      <pubDate>Thu, 03 Jan 2013 08:09:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28032#M1126</guid>
      <dc:creator>samsplunkd</dc:creator>
      <dc:date>2013-01-03T08:09:02Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker - Custom values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28033#M1127</link>
      <description>&lt;P&gt;Shame we can't override this in  "&amp;lt;input type="time" " code&lt;BR /&gt;
Alternatively, you could use "sideview Utils" which has option to provide custom time.&lt;/P&gt;</description>
      <pubDate>Wed, 12 Mar 2014 10:24:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Custom-values/m-p/28033#M1127</guid>
      <dc:creator>koshyk</dc:creator>
      <dc:date>2014-03-12T10:24:55Z</dc:date>
    </item>
  </channel>
</rss>

