How do you create a time range based off a _time-based token?

fetterman — Thu, 29 Nov 2018 19:59:23 GMT

I'm trying to pass the time parameter from an event clicked in one dashboard, into another dashboard. The receiving dashboard will display a 10 minute window (earliest=5 minutes preceding the event, latest=5 minutes after the event).

I'm using the following parameters (form.field1 is a time picker):

form.field1.earliest = $row._time$-300s
form.field1.latest = $row._time$+300s

I find that the time value is being passed over, but +-300s / 5m / etc. does not get evaluated, only appended to the time string.

Re: How do you create a time range based off a _time-based token?

fetterman — Fri, 30 Nov 2018 14:35:26 GMT

I found an answer for this here:
https://answers.splunk.com/answers/438520/how-to-pass-time-range-values-in-a-drilldown.html

topic Re: How do you create a time range based off a _time-based token? in Dashboards & Visualizations

How do you create a time range based off a _time-based token?

Re: How do you create a time range based off a _time-based token?