<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: TimeRangePicker Won't Hold Value on Dashboard in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102729#M5788</link>
    <description>&lt;P&gt;Code didn't post properly:&lt;/P&gt;

&lt;P&gt;&lt;VIEW template="dashboard.html" stylesheet="three_panel_custom_width.css" issticky="false"&gt;&lt;BR /&gt;
    &lt;MODULE name="SearchBar" layoutpanel="mainSearchControls"&gt;&lt;BR /&gt;
        &lt;OBJECT&gt;&lt;PARAM name="useAssistant" /&gt;true&lt;BR /&gt;
        &lt;PARAM name="useTypeahead" /&gt;true&lt;BR /&gt;
        &lt;MODULE name="TimeRangePicker"&gt;&lt;BR /&gt;
            &lt;PARAM name="searchWhenChanged" /&gt;true&lt;BR /&gt;
            &lt;PARAM name="default" /&gt;Last 4 Hours&lt;BR /&gt;
...&lt;/MODULE&gt;&lt;/OBJECT&gt;&lt;/MODULE&gt;&lt;/VIEW&gt;&lt;/P&gt;</description>
    <pubDate>Fri, 10 Dec 2010 04:37:16 GMT</pubDate>
    <dc:creator>snowmizer</dc:creator>
    <dc:date>2010-12-10T04:37:16Z</dc:date>
    <item>
      <title>TimeRangePicker Won't Hold Value on Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102728#M5787</link>
      <description>&lt;P&gt;How can I get the TimeRangePicker to always default to the value specified in my dashboard? I've read two different posts on this website and they both recommend using "isSticky=false" in the  tag on the dashboard. I have tried this and it will not work. I've got the default set to "Last 4 hours" but it always shows "Last 24 hours" since that's what I used for a previous dashboard search (different dashboard). Here's the code I have:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;view template="dashboard.html" stylesheet="three_panel_custom_width.css" isSticky="false"&amp;gt;
    &amp;lt;label&amp;gt;Cisco IPS Overview&amp;lt;/label&amp;gt;
    &amp;lt;module name="AccountBar" layoutPanel="appHeader"/&amp;gt;
    &amp;lt;module name="AppBar" layoutPanel="navigationHeader"/&amp;gt;
    &amp;lt;module name="Message" layoutPanel="messaging"&amp;gt;
        &amp;lt;param name="filter"&amp;gt;*&amp;lt;/param&amp;gt;
        &amp;lt;param name="clearOnJobDispatch"&amp;gt;False&amp;lt;/param&amp;gt;
        &amp;lt;param name="maxSize"&amp;gt;1&amp;lt;/param&amp;gt;
    &amp;lt;/module&amp;gt;
    &amp;lt;module name="TitleBar" layoutPanel="viewHeader"&amp;gt;
        &amp;lt;param name="actionsMenuFilter"&amp;gt;dashboard&amp;lt;/param&amp;gt;
    &amp;lt;/module&amp;gt;
    &amp;lt;module name="SearchBar" layoutPanel="mainSearchControls"&amp;gt;
        &amp;lt;param name="useAssistant"&amp;gt;true&amp;lt;/param&amp;gt;
        &amp;lt;param name="useTypeahead"&amp;gt;true&amp;lt;/param&amp;gt;
        &amp;lt;module name="TimeRangePicker"&amp;gt;
            &amp;lt;param name="searchWhenChanged"&amp;gt;true&amp;lt;/param&amp;gt;
            &amp;lt;param name="default"&amp;gt;Last 4 Hours&amp;lt;/param&amp;gt;
            &amp;lt;module name="ViewRedirector"&amp;gt;
                &amp;lt;param name="viewTarget"&amp;gt;flashtimeline&amp;lt;/param&amp;gt;
            &amp;lt;/module&amp;gt;
        &amp;lt;/module&amp;gt;
    &amp;lt;/module&amp;gt;
&amp;lt;/view&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Thanks.&lt;/P&gt;</description>
      <pubDate>Fri, 10 Dec 2010 04:35:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102728#M5787</guid>
      <dc:creator>snowmizer</dc:creator>
      <dc:date>2010-12-10T04:35:06Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker Won't Hold Value on Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102729#M5788</link>
      <description>&lt;P&gt;Code didn't post properly:&lt;/P&gt;

&lt;P&gt;&lt;VIEW template="dashboard.html" stylesheet="three_panel_custom_width.css" issticky="false"&gt;&lt;BR /&gt;
    &lt;MODULE name="SearchBar" layoutpanel="mainSearchControls"&gt;&lt;BR /&gt;
        &lt;OBJECT&gt;&lt;PARAM name="useAssistant" /&gt;true&lt;BR /&gt;
        &lt;PARAM name="useTypeahead" /&gt;true&lt;BR /&gt;
        &lt;MODULE name="TimeRangePicker"&gt;&lt;BR /&gt;
            &lt;PARAM name="searchWhenChanged" /&gt;true&lt;BR /&gt;
            &lt;PARAM name="default" /&gt;Last 4 Hours&lt;BR /&gt;
...&lt;/MODULE&gt;&lt;/OBJECT&gt;&lt;/MODULE&gt;&lt;/VIEW&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 10 Dec 2010 04:37:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102729#M5788</guid>
      <dc:creator>snowmizer</dc:creator>
      <dc:date>2010-12-10T04:37:16Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker Won't Hold Value on Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102730#M5789</link>
      <description>&lt;P&gt;channeling Nick here: &lt;/P&gt;

&lt;P&gt;"apparently if you set isSticky="False", it just means that it will &lt;EM&gt;no longer&lt;/EM&gt; remember changes to the value. however it will happily continue &lt;EM&gt;sticking&lt;/EM&gt; to the previously set value. so you'll have to set isSticky=False, and then find all the various places in various viewstate.conf files where different users have set different sticky values and delete them all. which if there's more than a few users is somewhat prohibitive." &lt;/P&gt;

&lt;P&gt;i've filed a bug. &lt;/P&gt;</description>
      <pubDate>Sat, 11 Dec 2010 02:32:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102730#M5789</guid>
      <dc:creator>piebob</dc:creator>
      <dc:date>2010-12-11T02:32:32Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker Won't Hold Value on Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102731#M5790</link>
      <description>&lt;P&gt;(expanding on my own answer which was channeled by piebob)&lt;/P&gt;

&lt;P&gt;I just experimented a bit and indeed it looks like there is a sizeable bug here.  When you set isSticky="False" you would expect it to then ignore all previously "stuck" values.  However it doesnt do this and what it does instead is prevent any &lt;EM&gt;further&lt;/EM&gt; changes from sticking.   So whatever you set it to the last time you touched it (ie before you changed isSticky to False) , that value will still apply.  The end result is that your value in the XML will still get overridden.&lt;/P&gt;

&lt;P&gt;Of course you can obliterate the most recently stuck value by deleting a key from a stanza in viewstates.conf.  Unfortunately since it remembers these states independently for each user you'll have a stanza in a different viewstates.conf file for &lt;B&gt;each user on the system&lt;/B&gt;. So to get it to  fall back to the value specified in the XML you'll have to not just set isSticky to "False" but also modify one viewstate.conf file per user. &lt;/P&gt;

&lt;P&gt;for example, for the admin user,  within  &lt;CODE&gt;/etc/users/admin/search/local/viewstates.conf&lt;/CODE&gt;, there will be this stanza: &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[flashtimeline:_current]
FlashTimeline_0_5_0.minimized = false
FieldPicker_0_6_1.fields = 
TimeRangePicker_0_1_0.default = Last 4 hours
FlashTimeline_0_5_0.height = 119px
SearchBar_0_0_0.autoOpenAssistant = false
Count_0_7_1.default = 50
MaxLines_0_13_0.default = 100
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;You can see in there that the TimeRangePicker is set to 'Last 4 hours'.  For you this will say whatever the last change was before the day when you set isSticky to "False". And for all other users they'll have a stanza in a different file in a different folder. So this means you'll have to go find that stanza for each user you have. &lt;/P&gt;

&lt;P&gt;And if your users ever use the flashtimeline view in other apps, you'll then also have to hunt down all the same stanzas in all the same user directories &lt;EM&gt;in all those other apps as well&lt;/EM&gt;.  Which is less than ideal.&lt;/P&gt;

&lt;P&gt;(ie &lt;CODE&gt;/etc/users/&amp;lt;username&amp;gt;/&amp;lt;appname&amp;gt;/local/viewstates.conf&lt;/CODE&gt;)&lt;/P&gt;

&lt;P&gt;It is indeed a bug, and rachel/piebob has filed it so hopefully it'll be fixed soon. &lt;/P&gt;</description>
      <pubDate>Sat, 11 Dec 2010 03:11:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102731#M5790</guid>
      <dc:creator>sideview</dc:creator>
      <dc:date>2010-12-11T03:11:42Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker Won't Hold Value on Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102732#M5791</link>
      <description>&lt;P&gt;Following this worked for what I needed. Thanks.&lt;/P&gt;</description>
      <pubDate>Tue, 14 Dec 2010 23:36:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102732#M5791</guid>
      <dc:creator>snowmizer</dc:creator>
      <dc:date>2010-12-14T23:36:44Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker Won't Hold Value on Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102733#M5792</link>
      <description>&lt;P&gt;I thought this was working but I've gone through these steps for another dashboard and my timerangepicker is stuck on the last value I selected yesterday. Also, will this work for the "results per page" lists?&lt;/P&gt;</description>
      <pubDate>Sat, 19 Feb 2011 00:33:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102733#M5792</guid>
      <dc:creator>snowmizer</dc:creator>
      <dc:date>2011-02-19T00:33:16Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker Won't Hold Value on Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102734#M5793</link>
      <description>&lt;P&gt;That means somewhere there's a viewstate still, or that the XML you're looking at is not what's running.  And it will work for results-per-page as well, aka the 'Count' module.&lt;/P&gt;</description>
      <pubDate>Sat, 19 Feb 2011 02:10:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102734#M5793</guid>
      <dc:creator>sideview</dc:creator>
      <dc:date>2011-02-19T02:10:25Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker Won't Hold Value on Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102735#M5794</link>
      <description>&lt;P&gt;Is this still a bug in 4.2?  I'd like to set the default time per app without having to touch all user files.&lt;BR /&gt;
Thanks&lt;/P&gt;</description>
      <pubDate>Tue, 14 Feb 2012 22:52:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102735#M5794</guid>
      <dc:creator>cyndiback</dc:creator>
      <dc:date>2012-02-14T22:52:15Z</dc:date>
    </item>
    <item>
      <title>Re: TimeRangePicker Won't Hold Value on Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102736#M5795</link>
      <description>&lt;P&gt;A little update on this: it is not enough to look at the &lt;CODE&gt;flashtimeline:_current&lt;/CODE&gt; stanza for every user, because if there are several dashboards in an app then there will be several other stanzas in the &lt;CODE&gt;viewstates.conf&lt;/CODE&gt; file which have to be edited too.&lt;/P&gt;</description>
      <pubDate>Thu, 14 Nov 2013 18:25:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/TimeRangePicker-Won-t-Hold-Value-on-Dashboard/m-p/102736#M5795</guid>
      <dc:creator>danielpellarini</dc:creator>
      <dc:date>2013-11-14T18:25:13Z</dc:date>
    </item>
  </channel>
</rss>

