https://community.splunk.com/t5/Splunk-Search/Global-time-picker-on-the-dashboard-not-working-on-savedSearch/m-p/503761#M140652 <P>I have 2 saved searches (non-transforming) on my dashboard and those are set to run every morning collecting data for the last 7 days . I have a global time picker on my dashboard and I was under the assumption that any time range (eg: last 2 days) within the time range of the saved search (last 7days) would yield results but it looks like I always get back the data for the last 7 days.</P> <P>&nbsp;</P> <LI-CODE lang="markup">&lt;form&gt; &lt;label&gt;Test1&lt;/label&gt; &lt;search id="query1" ref="query_01"&gt; &lt;earliest&gt;$time_token.earliest$&lt;/earliest&gt; &lt;latest&gt;$time_token.latest$&lt;/latest&gt; &lt;/search&gt; &lt;search id="query2" ref="query_02"&gt; &lt;earliest&gt;$time_token.earliest$&lt;/earliest&gt; &lt;latest&gt;$time_token.latest$&lt;/latest&gt; &lt;/search&gt; &lt;fieldset submitButton="false" autoRun="true"&gt; &lt;input type="time" token="time_token" searchWhenChanged="true"&gt; &lt;label&gt;&lt;/label&gt; &lt;default&gt; &lt;earliest&gt;-7d@d&lt;/earliest&gt; &lt;latest&gt;@d&lt;/latest&gt; &lt;/default&gt; &lt;/input&gt; &lt;/fieldset&gt; &lt;row&gt; &lt;panel&gt; &lt;chart&gt; &lt;title&gt;Count by Resource&lt;/title&gt; &lt;search base="query2"&gt; &lt;query&gt;| timechart count by timerName limit=0 | fields - NULL&lt;/query&gt; &lt;/search&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.overflowMode"&gt;ellipsisNone&lt;/option&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.rotation"&gt;0&lt;/option&gt; &lt;option name="charting.axisTitleX.text"&gt;Day&lt;/option&gt; &lt;option name="charting.axisTitleX.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisTitleY.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisTitleY2.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisX.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisX.scale"&gt;linear&lt;/option&gt; &lt;option name="charting.axisY.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisY.scale"&gt;linear&lt;/option&gt; &lt;option name="charting.axisY2.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisY2.enabled"&gt;0&lt;/option&gt; &lt;option name="charting.axisY2.scale"&gt;inherit&lt;/option&gt; &lt;option name="charting.chart"&gt;column&lt;/option&gt; &lt;option name="charting.chart.bubbleMaximumSize"&gt;50&lt;/option&gt; &lt;option name="charting.chart.bubbleMinimumSize"&gt;10&lt;/option&gt; &lt;option name="charting.chart.bubbleSizeBy"&gt;area&lt;/option&gt; &lt;option name="charting.chart.nullValueMode"&gt;gaps&lt;/option&gt; &lt;option name="charting.chart.showDataLabels"&gt;none&lt;/option&gt; &lt;option name="charting.chart.sliceCollapsingThreshold"&gt;0.01&lt;/option&gt; &lt;option name="charting.chart.stackMode"&gt;stacked&lt;/option&gt; &lt;option name="charting.chart.style"&gt;shiny&lt;/option&gt; &lt;option name="charting.drilldown"&gt;none&lt;/option&gt; &lt;option name="charting.layout.splitSeries"&gt;0&lt;/option&gt; &lt;option name="charting.layout.splitSeries.allowIndependentYRanges"&gt;0&lt;/option&gt; &lt;option name="charting.legend.labelStyle.overflowMode"&gt;ellipsisMiddle&lt;/option&gt; &lt;option name="charting.legend.mode"&gt;standard&lt;/option&gt; &lt;option name="charting.legend.placement"&gt;right&lt;/option&gt; &lt;option name="charting.lineWidth"&gt;2&lt;/option&gt; &lt;option name="height"&gt;319&lt;/option&gt; &lt;option name="refresh.display"&gt;progressbar&lt;/option&gt; &lt;option name="trellis.enabled"&gt;0&lt;/option&gt; &lt;option name="trellis.scales.shared"&gt;1&lt;/option&gt; &lt;option name="trellis.size"&gt;medium&lt;/option&gt; &lt;/chart&gt; &lt;/panel&gt; &lt;panel&gt; &lt;single&gt; &lt;title&gt;Count&lt;/title&gt; &lt;search base="query02"&gt; &lt;query&gt;| search "x=null" | stats count&lt;/query&gt; &lt;/search&gt; &lt;option name="colorBy"&gt;value&lt;/option&gt; &lt;option name="colorMode"&gt;none&lt;/option&gt; &lt;option name="drilldown"&gt;all&lt;/option&gt; &lt;option name="numberPrecision"&gt;0&lt;/option&gt; &lt;option name="rangeColors"&gt;["0x65a637","0x6db7c6","0xf7bc38","0xf58f39","0xd93f3c"]&lt;/option&gt; &lt;option name="rangeValues"&gt;[0,30,70,100]&lt;/option&gt; &lt;option name="refresh.display"&gt;progressbar&lt;/option&gt; &lt;option name="showSparkline"&gt;1&lt;/option&gt; &lt;option name="showTrendIndicator"&gt;1&lt;/option&gt; &lt;option name="trellis.enabled"&gt;0&lt;/option&gt; &lt;option name="trellis.scales.shared"&gt;1&lt;/option&gt; &lt;option name="trellis.size"&gt;medium&lt;/option&gt; &lt;option name="trendColorInterpretation"&gt;standard&lt;/option&gt; &lt;option name="trendDisplayMode"&gt;absolute&lt;/option&gt; &lt;option name="unitPosition"&gt;after&lt;/option&gt; &lt;option name="useColors"&gt;0&lt;/option&gt; &lt;option name="useThousandSeparators"&gt;1&lt;/option&gt; &lt;/single&gt; &lt;/panel&gt; &lt;/row&gt; &lt;/form&gt;</LI-CODE> <P>&nbsp;</P> <P><BR />I'm not sure what I'm doing wrong, any help is appreciated. Thanks!</P> Wed, 10 Jun 2020 20:09:29 GMT thenormalone 2020-06-10T20:09:29Z https://community.splunk.com/t5/Splunk-Search/Global-time-picker-on-the-dashboard-not-working-on-savedSearch/m-p/503761#M140652 <P>I have 2 saved searches (non-transforming) on my dashboard and those are set to run every morning collecting data for the last 7 days . I have a global time picker on my dashboard and I was under the assumption that any time range (eg: last 2 days) within the time range of the saved search (last 7days) would yield results but it looks like I always get back the data for the last 7 days.</P> <P>&nbsp;</P> <LI-CODE lang="markup">&lt;form&gt; &lt;label&gt;Test1&lt;/label&gt; &lt;search id="query1" ref="query_01"&gt; &lt;earliest&gt;$time_token.earliest$&lt;/earliest&gt; &lt;latest&gt;$time_token.latest$&lt;/latest&gt; &lt;/search&gt; &lt;search id="query2" ref="query_02"&gt; &lt;earliest&gt;$time_token.earliest$&lt;/earliest&gt; &lt;latest&gt;$time_token.latest$&lt;/latest&gt; &lt;/search&gt; &lt;fieldset submitButton="false" autoRun="true"&gt; &lt;input type="time" token="time_token" searchWhenChanged="true"&gt; &lt;label&gt;&lt;/label&gt; &lt;default&gt; &lt;earliest&gt;-7d@d&lt;/earliest&gt; &lt;latest&gt;@d&lt;/latest&gt; &lt;/default&gt; &lt;/input&gt; &lt;/fieldset&gt; &lt;row&gt; &lt;panel&gt; &lt;chart&gt; &lt;title&gt;Count by Resource&lt;/title&gt; &lt;search base="query2"&gt; &lt;query&gt;| timechart count by timerName limit=0 | fields - NULL&lt;/query&gt; &lt;/search&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.overflowMode"&gt;ellipsisNone&lt;/option&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.rotation"&gt;0&lt;/option&gt; &lt;option name="charting.axisTitleX.text"&gt;Day&lt;/option&gt; &lt;option name="charting.axisTitleX.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisTitleY.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisTitleY2.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisX.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisX.scale"&gt;linear&lt;/option&gt; &lt;option name="charting.axisY.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisY.scale"&gt;linear&lt;/option&gt; &lt;option name="charting.axisY2.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisY2.enabled"&gt;0&lt;/option&gt; &lt;option name="charting.axisY2.scale"&gt;inherit&lt;/option&gt; &lt;option name="charting.chart"&gt;column&lt;/option&gt; &lt;option name="charting.chart.bubbleMaximumSize"&gt;50&lt;/option&gt; &lt;option name="charting.chart.bubbleMinimumSize"&gt;10&lt;/option&gt; &lt;option name="charting.chart.bubbleSizeBy"&gt;area&lt;/option&gt; &lt;option name="charting.chart.nullValueMode"&gt;gaps&lt;/option&gt; &lt;option name="charting.chart.showDataLabels"&gt;none&lt;/option&gt; &lt;option name="charting.chart.sliceCollapsingThreshold"&gt;0.01&lt;/option&gt; &lt;option name="charting.chart.stackMode"&gt;stacked&lt;/option&gt; &lt;option name="charting.chart.style"&gt;shiny&lt;/option&gt; &lt;option name="charting.drilldown"&gt;none&lt;/option&gt; &lt;option name="charting.layout.splitSeries"&gt;0&lt;/option&gt; &lt;option name="charting.layout.splitSeries.allowIndependentYRanges"&gt;0&lt;/option&gt; &lt;option name="charting.legend.labelStyle.overflowMode"&gt;ellipsisMiddle&lt;/option&gt; &lt;option name="charting.legend.mode"&gt;standard&lt;/option&gt; &lt;option name="charting.legend.placement"&gt;right&lt;/option&gt; &lt;option name="charting.lineWidth"&gt;2&lt;/option&gt; &lt;option name="height"&gt;319&lt;/option&gt; &lt;option name="refresh.display"&gt;progressbar&lt;/option&gt; &lt;option name="trellis.enabled"&gt;0&lt;/option&gt; &lt;option name="trellis.scales.shared"&gt;1&lt;/option&gt; &lt;option name="trellis.size"&gt;medium&lt;/option&gt; &lt;/chart&gt; &lt;/panel&gt; &lt;panel&gt; &lt;single&gt; &lt;title&gt;Count&lt;/title&gt; &lt;search base="query02"&gt; &lt;query&gt;| search "x=null" | stats count&lt;/query&gt; &lt;/search&gt; &lt;option name="colorBy"&gt;value&lt;/option&gt; &lt;option name="colorMode"&gt;none&lt;/option&gt; &lt;option name="drilldown"&gt;all&lt;/option&gt; &lt;option name="numberPrecision"&gt;0&lt;/option&gt; &lt;option name="rangeColors"&gt;["0x65a637","0x6db7c6","0xf7bc38","0xf58f39","0xd93f3c"]&lt;/option&gt; &lt;option name="rangeValues"&gt;[0,30,70,100]&lt;/option&gt; &lt;option name="refresh.display"&gt;progressbar&lt;/option&gt; &lt;option name="showSparkline"&gt;1&lt;/option&gt; &lt;option name="showTrendIndicator"&gt;1&lt;/option&gt; &lt;option name="trellis.enabled"&gt;0&lt;/option&gt; &lt;option name="trellis.scales.shared"&gt;1&lt;/option&gt; &lt;option name="trellis.size"&gt;medium&lt;/option&gt; &lt;option name="trendColorInterpretation"&gt;standard&lt;/option&gt; &lt;option name="trendDisplayMode"&gt;absolute&lt;/option&gt; &lt;option name="unitPosition"&gt;after&lt;/option&gt; &lt;option name="useColors"&gt;0&lt;/option&gt; &lt;option name="useThousandSeparators"&gt;1&lt;/option&gt; &lt;/single&gt; &lt;/panel&gt; &lt;/row&gt; &lt;/form&gt;</LI-CODE> <P>&nbsp;</P> <P><BR />I'm not sure what I'm doing wrong, any help is appreciated. Thanks!</P> Wed, 10 Jun 2020 20:09:29 GMT https://community.splunk.com/t5/Splunk-Search/Global-time-picker-on-the-dashboard-not-working-on-savedSearch/m-p/503761#M140652 thenormalone 2020-06-10T20:09:29Z https://community.splunk.com/t5/Splunk-Search/Global-time-picker-on-the-dashboard-not-working-on-savedSearch/m-p/503794#M140653 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/195013">@thenormalone</a>,</P><P>Saved searches won't know about the global time you set in the dashboard because it is cached results that it is pulling.&nbsp; You have to tell the results to filter based on the sub-searches global time and that can be accomplished by adding this to your search:&nbsp;</P><LI-CODE lang="python">| addinfo | where _time&gt;=info_min_time and _time&lt;info_max_time</LI-CODE><P>&nbsp;</P><P>Here's what it would look like with the full xml you provided:</P><LI-CODE lang="markup">&lt;form&gt; &lt;label&gt;Test1&lt;/label&gt; &lt;search id="query1" ref="query_01"&gt; &lt;earliest&gt;$time_token.earliest$&lt;/earliest&gt; &lt;latest&gt;$time_token.latest$&lt;/latest&gt; &lt;/search&gt; &lt;search id="query2" ref="query_02"&gt; &lt;earliest&gt;$time_token.earliest$&lt;/earliest&gt; &lt;latest&gt;$time_token.latest$&lt;/latest&gt; &lt;/search&gt; &lt;fieldset submitButton="false" autoRun="true"&gt; &lt;input type="time" token="time_token" searchWhenChanged="true"&gt; &lt;label&gt;&lt;/label&gt; &lt;default&gt; &lt;earliest&gt;-7d@d&lt;/earliest&gt; &lt;latest&gt;@d&lt;/latest&gt; &lt;/default&gt; &lt;/input&gt; &lt;/fieldset&gt; &lt;row&gt; &lt;panel&gt; &lt;chart&gt; &lt;title&gt;Count by Resource&lt;/title&gt; &lt;search base="query2"&gt; &lt;query&gt;| addinfo | where _time&gt;=info_min_time and _time&lt;info_max_time | timechart count by timerName limit=0 | fields - NULL&lt;/query&gt; &lt;/search&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.overflowMode"&gt;ellipsisNone&lt;/option&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.rotation"&gt;0&lt;/option&gt; &lt;option name="charting.axisTitleX.text"&gt;Day&lt;/option&gt; &lt;option name="charting.axisTitleX.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisTitleY.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisTitleY2.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisX.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisX.scale"&gt;linear&lt;/option&gt; &lt;option name="charting.axisY.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisY.scale"&gt;linear&lt;/option&gt; &lt;option name="charting.axisY2.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.axisY2.enabled"&gt;0&lt;/option&gt; &lt;option name="charting.axisY2.scale"&gt;inherit&lt;/option&gt; &lt;option name="charting.chart"&gt;column&lt;/option&gt; &lt;option name="charting.chart.bubbleMaximumSize"&gt;50&lt;/option&gt; &lt;option name="charting.chart.bubbleMinimumSize"&gt;10&lt;/option&gt; &lt;option name="charting.chart.bubbleSizeBy"&gt;area&lt;/option&gt; &lt;option name="charting.chart.nullValueMode"&gt;gaps&lt;/option&gt; &lt;option name="charting.chart.showDataLabels"&gt;none&lt;/option&gt; &lt;option name="charting.chart.sliceCollapsingThreshold"&gt;0.01&lt;/option&gt; &lt;option name="charting.chart.stackMode"&gt;stacked&lt;/option&gt; &lt;option name="charting.chart.style"&gt;shiny&lt;/option&gt; &lt;option name="charting.drilldown"&gt;none&lt;/option&gt; &lt;option name="charting.layout.splitSeries"&gt;0&lt;/option&gt; &lt;option name="charting.layout.splitSeries.allowIndependentYRanges"&gt;0&lt;/option&gt; &lt;option name="charting.legend.labelStyle.overflowMode"&gt;ellipsisMiddle&lt;/option&gt; &lt;option name="charting.legend.mode"&gt;standard&lt;/option&gt; &lt;option name="charting.legend.placement"&gt;right&lt;/option&gt; &lt;option name="charting.lineWidth"&gt;2&lt;/option&gt; &lt;option name="height"&gt;319&lt;/option&gt; &lt;option name="refresh.display"&gt;progressbar&lt;/option&gt; &lt;option name="trellis.enabled"&gt;0&lt;/option&gt; &lt;option name="trellis.scales.shared"&gt;1&lt;/option&gt; &lt;option name="trellis.size"&gt;medium&lt;/option&gt; &lt;/chart&gt; &lt;/panel&gt; &lt;panel&gt; &lt;single&gt; &lt;title&gt;Count&lt;/title&gt; &lt;search base="query02"&gt; &lt;query&gt;| addinfo | where _time&gt;=info_min_time and _time&lt;info_max_time | search "x=null" | stats count&lt;/query&gt; &lt;/search&gt; &lt;option name="colorBy"&gt;value&lt;/option&gt; &lt;option name="colorMode"&gt;none&lt;/option&gt; &lt;option name="drilldown"&gt;all&lt;/option&gt; &lt;option name="numberPrecision"&gt;0&lt;/option&gt; &lt;option name="rangeColors"&gt;["0x65a637","0x6db7c6","0xf7bc38","0xf58f39","0xd93f3c"]&lt;/option&gt; &lt;option name="rangeValues"&gt;[0,30,70,100]&lt;/option&gt; &lt;option name="refresh.display"&gt;progressbar&lt;/option&gt; &lt;option name="showSparkline"&gt;1&lt;/option&gt; &lt;option name="showTrendIndicator"&gt;1&lt;/option&gt; &lt;option name="trellis.enabled"&gt;0&lt;/option&gt; &lt;option name="trellis.scales.shared"&gt;1&lt;/option&gt; &lt;option name="trellis.size"&gt;medium&lt;/option&gt; &lt;option name="trendColorInterpretation"&gt;standard&lt;/option&gt; &lt;option name="trendDisplayMode"&gt;absolute&lt;/option&gt; &lt;option name="unitPosition"&gt;after&lt;/option&gt; &lt;option name="useColors"&gt;0&lt;/option&gt; &lt;option name="useThousandSeparators"&gt;1&lt;/option&gt; &lt;/single&gt; &lt;/panel&gt; &lt;/row&gt; &lt;/form&gt;</LI-CODE><P>&nbsp;</P> Wed, 10 Jun 2020 20:00:48 GMT https://community.splunk.com/t5/Splunk-Search/Global-time-picker-on-the-dashboard-not-working-on-savedSearch/m-p/503794#M140653 dmarling 2020-06-10T20:00:48Z https://community.splunk.com/t5/Splunk-Search/Global-time-picker-on-the-dashboard-not-working-on-savedSearch/m-p/503839#M140661 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/215385">@dmarling</a>&nbsp;I tried your suggestion but it still keeps displaying data for all the 7 days. &nbsp;Both my saved searches retrieves all the fields ( | fields *) if that matters .</P> Fri, 12 Jun 2020 02:40:15 GMT https://community.splunk.com/t5/Splunk-Search/Global-time-picker-on-the-dashboard-not-working-on-savedSearch/m-p/503839#M140661 thenormalone 2020-06-12T02:40:15Z