https://community.splunk.com/t5/Dashboards-Visualizations/Token/m-p/507982#M33778 <P>Resolved, thaks</P> Wed, 08 Jul 2020 06:41:44 GMT Stives 2020-07-08T06:41:44Z https://community.splunk.com/t5/Dashboards-Visualizations/Token/m-p/507769#M33758 <P>Dear Sir, I would like to set a token in order to be able modify -1h treshold.</P><P>| tstats latest(_time) as latest where index=* earliest=-24h by host<BR />| eval recent = if(latest &gt; relative_time(now(),"-1h"),1,0), realLatest = strftime(latest,"%c")<BR />| eval data=case(recent=="0","No Data",recent=="1","OK")<BR />| table host,realLatest,data</P><P>My earliest -24h token works fine, but I would like to set token alo for "-1h" relative time in order to be able modify treshold. Can you help ?</P><P>Thank you in advance.</P><P>regards,</P><P>Stives</P> Tue, 07 Jul 2020 07:49:22 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Token/m-p/507769#M33758 Stives 2020-07-07T07:49:22Z https://community.splunk.com/t5/Dashboards-Visualizations/Token/m-p/507982#M33778 <P>Resolved, thaks</P> Wed, 08 Jul 2020 06:41:44 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Token/m-p/507982#M33778 Stives 2020-07-08T06:41:44Z https://community.splunk.com/t5/Dashboards-Visualizations/Token/m-p/508044#M33783 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/223397">@Stives</a>&nbsp;Request you to post what you tried which fixed the issue. Accept the answer to mark the question as answered.</P> Wed, 08 Jul 2020 11:19:30 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Token/m-p/508044#M33783 niketn 2020-07-08T11:19:30Z