topic Re: How to change the latest for the TimeRangePicker ? in Dashboards & Visualizations

How to change the latest for the TimeRangePicker ?

ID_SplunkUser — Thu, 11 Aug 2016 05:48:29 GMT

Hi,

I'm using Time Range Picker in my dashboard. Whenever I select any particular time range, I want to increase the latest with 1 day.
i.e if selected latest is 10 Aug, then it should take it 11 Aug in the latest.
Earliest will be same.
Code:

<input type="time" searchWhenChanged="true" token="TIMEPICKER">
      <label>Date</label>

      <change>
         <set token="STARTDATEEPOCH">$earliest$</set>
        <set token="ENDDATEEPOCH">$latest$</set>
      </change>

    </input>

And I'm using the Time Range Picker selection as time range for Base query. I want the time range for Base query should be earliest & (latest+1day)

<search id="base">
    <query>index=hvpayments sourcetype=pq | eventstats count(ID) as Count by ID</query>
    <earliest>$STARTDATEEPOCH$</earliest>
    <latest>$ENDDATEEPOCH$</latest>
  </search>

Re: How to change the latest for the TimeRangePicker ?

faizancool85 — Thu, 11 Aug 2016 06:47:28 GMT

Hello,

You can achieve this by tweaking the required time range stanza in the times.conf file, which locates in etc/system/default.

Regards,
Faizan

Re: How to change the latest for the TimeRangePicker ?

ID_SplunkUser — Thu, 11 Aug 2016 06:49:29 GMT

Thanks for replying. But I don't want to change any configuration file. Is it possible to change within the Dashboard XML ?

Re: How to change the latest for the TimeRangePicker ?

rajeev_ku — Thu, 11 Aug 2016 08:32:50 GMT

Could you pls share the portion of XML so that can be tweaked?

Re: How to change the latest for the TimeRangePicker ?

sundareshr — Thu, 11 Aug 2016 13:48:00 GMT

Try this

index=xyz latest=[|gentimes start=-1 | eval search=relative_time(now(), "$timepicker.latest$")+86400 | fields search ]

Re: How to change the latest for the TimeRangePicker ?

ID_SplunkUser — Mon, 15 Aug 2016 02:58:04 GMT

I tried it... but it doesn't work the way I want it.

Re: How to change the latest for the TimeRangePicker ?

ID_SplunkUser — Mon, 15 Aug 2016 03:04:38 GMT

I changed my question, and updated with the code.