topic Re: How to load a dashboard with a default time range of "month to date" in Splunk? in Dashboards & Visualizations

How to load a dashboard with a default time range of "month to date" in Splunk?

snehalk — Mon, 15 Jun 2015 16:58:59 GMT

Hello All,

I need to load a dashboard as "month to date" , I tried with below

<input type="time" searchWhenChanged="true">
  <label/>
  <default>
    <earliestTime>-30d@d</earliestTime>
    <latestTime>now</latestTime>
  </default>
</input>

But I need to load as month to date, can any one help me on this.

Thanks,
Snehal

Re: How to load a dashboard with a default time range of "month to date" in Splunk?

mkemmerer — Mon, 15 Jun 2015 17:43:18 GMT

You need to add a token to your input and apply it to the earliest Time latest Time elements for each panel. For example:

      <form>
        <input type="time" token="timefield1">
          <label>Range</label>
          <default>
            <earliestTime>-30d@d</earliestTime>
            <latestTime>now</latestTime>
          </default>
        </input>
      <row>
        <panel>
          <chart>
            <title>CPU Usage</title>
            <searchString>index=os sourcetype=performance | timechart avg(CPU) by host</searchString>
            <earliestTime>$timefield1.earliest$</earliestTime>
            <latestTime>$timefield1.latest$</latestTime>
          </chart>
        </panel>
      </row>
    </form>

Re: How to load a dashboard with a default time range of "month to date" in Splunk?

snehalk — Tue, 16 Jun 2015 14:52:23 GMT

Hello mkemmerer,

Thanks for reply, for last month it working fine, but what I need is, it should be "month to date" by default and not "last month".

Could you please guide me on this?

Thanks
Snehal

Re: How to load a dashboard with a default time range of "month to date" in Splunk?

snehalk — Mon, 20 Jul 2015 11:05:15 GMT

Hello All

I used below time range to get "month to date" by default.

<input type="time" searchWhenChanged="true">
  <label/>
  <default>
    <earliestTime>@mon</earliestTime>
    <latestTime>now</latestTime>
  </default>
</input>

Thannks for your support