topic Re: How to remove some extra options from a custom time picker? in Splunk Search

How to remove some extra options from a custom time picker?

AKG1_old1 — Thu, 23 Aug 2018 09:59:52 GMT

Hello,

I am looking to remove some extra options from Time picker. I have disabled them through GUI (User Interface >> Time ranges).

When I check using CLI it shows these are disabled but those options are still present. (I have checked by removing brower caching)

PS: I don't have times.conf for App specific. My app using default one.

Please advice if I am missing something.

Thanks

Re: How to remove some extra options from a custom time picker?

deepashri_123 — Thu, 23 Aug 2018 10:33:09 GMT

Hey @agoyal,

Refer this answer:
https://answers.splunk.com/answers/222650/limit-choices-in-default-timepicker.html

Let me know if this helps!!

Re: How to remove some extra options from a custom time picker?

AKG1_old1 — Thu, 23 Aug 2018 12:58:13 GMT

Thanks. it's useful but doen't sovle my problem.

The other post is to hide the full sections like it I want to remove full section out of Presents, Relative, Date range etc. My requirement is to remove some options from Presents section. (Attached screenshot in main question)

Ex. this code worked for remove full real-time section.
div[data-test-panel-id^='real'] {
display: none !important;
}

Re: How to remove some extra options from a custom time picker?

p_gurav — Thu, 23 Aug 2018 14:48:06 GMT

You can try this option of creating CSS:
https://simonduff.net/splunk_restrict_time_range_picker/

Re: How to remove some extra options from a custom time picker?

AKG1_old1 — Thu, 23 Aug 2018 16:11:22 GMT

Thanks, I think it's for older Splunk versions. I have latest Splunk v7.x.

Like
Old version
div[id^='realtime_view']

New Version
div[data-test-panel-id^='real']

Not sure about sytax for individal item in newer version

Old Version
a[data-earliest="@d"][data-latest="now"]

New
??

Re: How to remove some extra options from a custom time picker?

AKG1_old1 — Thu, 23 Aug 2018 16:22:46 GMT

Thanks, Actually I have removed the entries from and it worked.

splunk/etc/system/default/times.conf

Re: How to remove some extra options from a custom time picker?

AKG1_old1 — Thu, 23 Aug 2018 16:22:58 GMT

Thanks, Actually I have removed the entries from and it worked.

splunk/etc/system/default/times.conf

Re: How to remove some extra options from a custom time picker?

AKG1_old1 — Thu, 23 Aug 2018 16:24:03 GMT

Not sure why disable doesn't work but removing entries from below file worked for me.
splunk/etc/system/default/times.conf