https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388906#M113391 <P>Where is the link?</P> Wed, 22 May 2019 12:38:36 GMT richgalloway 2019-05-22T12:38:36Z https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388903#M113388 <P>Hello</P> <P>Is it possible to use a select time range directly in a timechart?<BR /> it means that I would like to use the select time range between tags<BR /> i would also like to have the possibility to modify the span value directly in the panel<BR /> could you help me pelase</P> Wed, 22 May 2019 07:19:40 GMT https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388903#M113388 jip31 2019-05-22T07:19:40Z https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388904#M113389 <P>Take a look <A href="https://docs.splunk.com/Documentation/Splunk/latest/Viz/Chartcontrols">here</A>. There are examples within demonstrating the behaviour I believe you are after</P> Wed, 22 May 2019 07:25:24 GMT https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388904#M113389 twesty 2019-05-22T07:25:24Z https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388905#M113390 <P>hi mate,</P> <P>just double checking my understanding. Do you want the "earliest and latest" to be modified dynamically or . "span" within timechart?</P> <P>In dashboard, each of them can be put as a token in drop down (or any fields)<BR /> =&gt; For earliest and latest, you need to amend at base search level</P> <PRE><CODE>index=* sourcetype=somesourcetype earliest=$myearliest$ latest=$mylatest$ | timechart ... </CODE></PRE> <P>=&gt; If you want to amend span, then do the same for $span$</P> <PRE><CODE>index=* sourcetype=somesourcetype | timechart span=$myspan$ count by something </CODE></PRE> <P><A href="https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/tokens">https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/tokens</A></P> Wed, 22 May 2019 07:32:20 GMT https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388905#M113390 koshyk 2019-05-22T07:32:20Z https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388906#M113391 <P>Where is the link?</P> Wed, 22 May 2019 12:38:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388906#M113391 richgalloway 2019-05-22T12:38:36Z https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388907#M113392 <P>Sorry, for some reason it was taken off my answer. <A href="https://docs.splunk.com/Documentation/Splunk/latest/Viz/Chartcontrols">https://docs.splunk.com/Documentation/Splunk/latest/Viz/Chartcontrols</A></P> Wed, 22 May 2019 12:48:44 GMT https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388907#M113392 twesty 2019-05-22T12:48:44Z https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388908#M113393 <P>HI<BR /> Thanks but my exact question is to know if its possible to "play" with earliest=$myearliest$ latest=$mylatest$ or span=$myspan$ directly in the timechart???</P> Thu, 23 May 2019 06:30:44 GMT https://community.splunk.com/t5/Splunk-Search/How-to-select-a-time-range-in-a-timechart/m-p/388908#M113393 jip31 2019-05-23T06:30:44Z