topic Re: Display time in panel in Dashboards & Visualizations

How to display time in panel?

stwong — Thu, 30 Jul 2020 04:51:23 GMT

Hello,

I'm writing a simple dashboard with a time picker and some panels.

I try to display the from/to time selected by user in panel header.

It works if user select Date/Time range, but for relative time period (e.g. last 1 day, last 15 minutes), the earliest and latest time are non-numeric values like -d@d, now, etc.

Possible to get the search start/end time for relative time period cases?

Thanks a lot.

Regards

/ST Wong

Re: Display time in panel

isoutamo — Wed, 29 Jul 2020 11:14:02 GMT

Is this what you are looking for?

https://community.splunk.com/t5/Dashboards-Visualizations/What-s-the-Token-name-for-the-Time-Picker-s-display-value-if-any/td-p/290080

r. Ismo

Re: Display time in panel

stwong — Thu, 30 Jul 2020 01:17:55 GMT

Hi,

Thanks. I tried simple code like following but unable to get values in $job.earliestTime$ and $job.latestTime$. Did i miss anything?

Thanks a lot.

<panel> <single> <title>Total access for department $d_name$ between $job.earliestTime$ and $job.latestTime$ </title> <search> <query> [snipped]

Re: Display time in panel

isoutamo — Thu, 30 Jul 2020 09:45:47 GMT

On answer

https://community.splunk.com/t5/Archive/Running-one-of-two-searches-based-on-time-picker-selection/td-p/364411

has said

Step 1) Run a dummy search (only use | makeresults to ensure actual index search is not performed) with the time tokens (assuming time picker field name is tokTime) as $tokTime.earliest$ and $tokTime.latest$.

Step 2) Code the Search Event Handler (in the example I have used <done>, <progress> can also be used. These Search Event Handlers can access default search time tokens i.e. $job.earliestTime$ and $job.latestTime$. But in String time format not epoch.

Re: Display time in panel

stwong — Thu, 30 Jul 2020 10:04:22 GMT

Hi, thanks for your help. It works when using with <done>.

Rgds