<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: change scheduled search timerange with timerangepicker in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97479#M5354</link>
    <description>&lt;P&gt;depending on the &lt;CODE&gt;useHistory&lt;/CODE&gt; param, the &lt;CODE&gt;HiddenSavedSearch&lt;/CODE&gt; module will -- &lt;/P&gt;

&lt;P&gt;a) when useHistory is True - AND the scheduler has run at least one job for that search, it will show the previous results of that search.  If you insert a TimeRangePicker into the hierarchy between HiddenSavedSearch and dispatching modules like SimpleResultsTable, you will get a red error saying this is a configuration error.&lt;/P&gt;

&lt;P&gt;b) when useHistory is False,  HiddenSavedSearch will act just like a HiddenSearch with that timerange and search entered in.  You can place TimeRangePicker's downstream from HiddenSavedSearch and it will work just fine. &lt;/P&gt;

&lt;P&gt;It sounds like when you tried setting useHistory to False you got some error,  but I think the text of that error is quite important because it should have been fine.  There may have been another problem that has nothing to do with this time range issue. What was the exact error you got when you tried setting &lt;CODE&gt;useHistory&lt;/CODE&gt; to False?&lt;/P&gt;

&lt;P&gt;Indeed the ui examples app has a somewhat extreme example using Switcher modules, showing you how you can have different &lt;CODE&gt;scheduled&lt;/CODE&gt; search results, each from different time ranges, appear when you change the selected option of a PulldownSwitcher module.&lt;/P&gt;</description>
    <pubDate>Sun, 08 May 2011 17:16:15 GMT</pubDate>
    <dc:creator>sideview</dc:creator>
    <dc:date>2011-05-08T17:16:15Z</dc:date>
    <item>
      <title>change scheduled search timerange with timerangepicker</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97477#M5352</link>
      <description>&lt;P&gt;I have some HiddenSavedSearches in my dashboard but want to add the timerangepicker to change the timerange from the HiddenSavedSearches.&lt;BR /&gt;
Configure this with &lt;OBJECT&gt;&lt;PARAM name="useHistory" /&gt;False gives an error, and digin into the uiexamplesapp  i noticed the &lt;/OBJECT&gt;&lt;/P&gt;

&lt;P&gt;switcher_time_ui_with_scheduled_jobs example&lt;/P&gt;

&lt;P&gt;But here the scheduled timeranges are hardcoded!, so am i right that :&lt;BR /&gt;
 - This is not possible? ( holy cow this should be!)&lt;BR /&gt;
 - If not, what is the way to handle this?&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 09:32:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97477#M5352</guid>
      <dc:creator>Starlette</dc:creator>
      <dc:date>2020-09-28T09:32:22Z</dc:date>
    </item>
    <item>
      <title>Re: change scheduled search timerange with timerangepicker</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97478#M5353</link>
      <description>&lt;P&gt;The HiddenSavedSearch currently shows results of a saved search and will not be influenced by time ranges.  &lt;/P&gt;

&lt;P&gt;If you would like to search over a dynamic time - you might use the &lt;A href="http://www.splunk.com/base/Documentation/4.2.1/Developer/UseSwitchers#LinkSwitcher"&gt;LinkSwitcher&lt;/A&gt; to show the HiddenSavedSearch in one child and the &lt;A href="http://www.splunk.com/base/Documentation/4.2.1/Developer/ModuleReference#TimeRangePicker"&gt;TimeRangePicker&lt;/A&gt; combined with a &lt;A href="http://www.splunk.com/base/Documentation/4.2.1/Developer/ModuleReference#HiddenSearch"&gt;HiddenSearch&lt;/A&gt; in the second child.  &lt;/P&gt;

&lt;P&gt;The TimeRangePicker will enable you to choose a time using the same time selection method used in the Search app on the flashtimeline and the HiddenSearch accepts this time range as part of its search criteria.  &lt;/P&gt;</description>
      <pubDate>Sun, 08 May 2011 16:37:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97478#M5353</guid>
      <dc:creator>bwooden</dc:creator>
      <dc:date>2011-05-08T16:37:43Z</dc:date>
    </item>
    <item>
      <title>Re: change scheduled search timerange with timerangepicker</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97479#M5354</link>
      <description>&lt;P&gt;depending on the &lt;CODE&gt;useHistory&lt;/CODE&gt; param, the &lt;CODE&gt;HiddenSavedSearch&lt;/CODE&gt; module will -- &lt;/P&gt;

&lt;P&gt;a) when useHistory is True - AND the scheduler has run at least one job for that search, it will show the previous results of that search.  If you insert a TimeRangePicker into the hierarchy between HiddenSavedSearch and dispatching modules like SimpleResultsTable, you will get a red error saying this is a configuration error.&lt;/P&gt;

&lt;P&gt;b) when useHistory is False,  HiddenSavedSearch will act just like a HiddenSearch with that timerange and search entered in.  You can place TimeRangePicker's downstream from HiddenSavedSearch and it will work just fine. &lt;/P&gt;

&lt;P&gt;It sounds like when you tried setting useHistory to False you got some error,  but I think the text of that error is quite important because it should have been fine.  There may have been another problem that has nothing to do with this time range issue. What was the exact error you got when you tried setting &lt;CODE&gt;useHistory&lt;/CODE&gt; to False?&lt;/P&gt;

&lt;P&gt;Indeed the ui examples app has a somewhat extreme example using Switcher modules, showing you how you can have different &lt;CODE&gt;scheduled&lt;/CODE&gt; search results, each from different time ranges, appear when you change the selected option of a PulldownSwitcher module.&lt;/P&gt;</description>
      <pubDate>Sun, 08 May 2011 17:16:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97479#M5354</guid>
      <dc:creator>sideview</dc:creator>
      <dc:date>2011-05-08T17:16:15Z</dc:date>
    </item>
    <item>
      <title>Re: change scheduled search timerange with timerangepicker</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97480#M5355</link>
      <description>&lt;P&gt;You could also use a macro withing your HiddenSearch.&lt;/P&gt;</description>
      <pubDate>Sun, 08 May 2011 17:20:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97480#M5355</guid>
      <dc:creator>gkanapathy</dc:creator>
      <dc:date>2011-05-08T17:20:29Z</dc:date>
    </item>
    <item>
      <title>Re: change scheduled search timerange with timerangepicker</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97481#M5356</link>
      <description>&lt;P&gt;Youre right, i guess i used the useHistory is True, ( got the config error)&lt;BR /&gt;
But I tried all the options ( true/false/auto), i am not sure how to use the linkoption but will digin into it, as gnanapaty mentions, to use a macro is not clear to me,,thats just a partly search right?&lt;/P&gt;</description>
      <pubDate>Mon, 09 May 2011 05:32:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97481#M5356</guid>
      <dc:creator>Starlette</dc:creator>
      <dc:date>2011-05-09T05:32:39Z</dc:date>
    </item>
    <item>
      <title>Re: change scheduled search timerange with timerangepicker</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97482#M5357</link>
      <description>&lt;P&gt;If you dont want to use the jobs that might have been previously run by the scheduler,  then you should use useHistory False.  Try it again and paste in any errors that it gives you, because SavedSearch + TimeRangePicker &lt;EM&gt;should&lt;/EM&gt; work fine together in that configuration.&lt;/P&gt;</description>
      <pubDate>Mon, 09 May 2011 16:42:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/change-scheduled-search-timerange-with-timerangepicker/m-p/97482#M5357</guid>
      <dc:creator>sideview</dc:creator>
      <dc:date>2011-05-09T16:42:23Z</dc:date>
    </item>
  </channel>
</rss>

