<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Time picker not working on search/dashboard in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655954#M226552</link>
    <description>&lt;P&gt;Would love to add a trend line for the amount of cores. So its easier to see if its trending up or down (And maybe even a forecast?)&lt;/P&gt;</description>
    <pubDate>Tue, 29 Aug 2023 11:06:30 GMT</pubDate>
    <dc:creator>michaelnorup</dc:creator>
    <dc:date>2023-08-29T11:06:30Z</dc:date>
    <item>
      <title>Why is the Time picker not working on search/dashboard?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655938#M226543</link>
      <description>&lt;P&gt;Hi.&lt;BR /&gt;&lt;BR /&gt;i have a search a show a graphchart for 14 months. If i change the timepicker it still shows 14 months for some reason. As you can see&amp;nbsp; in the picture, the time picker says 30 days, but the graph still shows 14 months. What gives?&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="michaelnorup_0-1693302534910.png" style="width: 802px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/26990i94A64EE74DF79FEE/image-dimensions/802x479?v=v2" width="802" height="479" role="button" title="michaelnorup_0-1693302534910.png" alt="michaelnorup_0-1693302534910.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;Also, is there a way to display a trendline on the graph? If i use the | trendline sma10(Cores) or the like, it changes the graph instead of just showing a linear line&lt;/P&gt;</description>
      <pubDate>Wed, 30 Aug 2023 16:15:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655938#M226543</guid>
      <dc:creator>michaelnorup</dc:creator>
      <dc:date>2023-08-30T16:15:25Z</dc:date>
    </item>
    <item>
      <title>Re: Time picker not working on search/dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655942#M226544</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/237593"&gt;@michaelnorup&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;using loadjob, you display the results of an already executed search, so the Time Picker hasn't any effect on it, you can use the Time Picker on searches, not on loadjob.&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Tue, 29 Aug 2023 10:29:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655942#M226544</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2023-08-29T10:29:19Z</dc:date>
    </item>
    <item>
      <title>Re: Time picker not working on search/dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655944#M226545</link>
      <description>&lt;P&gt;Hi Giuseppe.&lt;BR /&gt;&lt;BR /&gt;Thanks makes sense, thanks alot.&lt;BR /&gt;&lt;BR /&gt;Do you have any idea about the trendline then? &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 29 Aug 2023 10:37:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655944#M226545</guid>
      <dc:creator>michaelnorup</dc:creator>
      <dc:date>2023-08-29T10:37:57Z</dc:date>
    </item>
    <item>
      <title>Re: Time picker not working on search/dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655946#M226546</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/237593"&gt;@michaelnorup&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;about the trendline, if you havedata to create the trendline in the results of the loadjob ,&amp;nbsp;you could elaborate them.&lt;/P&gt;&lt;P&gt;I cannot see tem because, after a timechart you don't have other fields, see, removing the timeachart, which fields you have, so you could modify your search.&lt;/P&gt;&lt;P&gt;If you would help, please share your search in text mode (using the Insert/Edit Code Sample button), not as a screenshot, eventually with a masked part, to avoid to re-write all the search.&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Tue, 29 Aug 2023 10:45:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655946#M226546</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2023-08-29T10:45:28Z</dc:date>
    </item>
    <item>
      <title>Re: Time picker not working on search/dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655949#M226548</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;/P&gt;&lt;P&gt;This is the loadjob:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| savedsearch "Server - XXXXXX" | fillnull value=- | search SerialNumber!=VMware* | eval ServerName = host | eval ServerName = upper(ServerName) | eval Virtual="N/A" | eval PowerState="PoweredOn" | append [| savedsearch "Server - Vmware info" | eval CPU_Arch = "x86_64" | eval Cores = CpuCount | eval DiskGB = ProvisionedSpaceGB | eval Virtual="VMware"] | table _time Date Customer ServerName Cores MemoryGB DiskGB CPU_Arch PowerState Virtual Landscape SID System Instance | fillnull value=- | eval Date=strftime(_time, "%x") | dedup ServerName,Date&lt;/LI-CODE&gt;&lt;P&gt;Can you use that? ^^&lt;BR /&gt;Thanks&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 29 Aug 2023 10:49:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655949#M226548</guid>
      <dc:creator>michaelnorup</dc:creator>
      <dc:date>2023-08-29T10:49:43Z</dc:date>
    </item>
    <item>
      <title>Re: Time picker not working on search/dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655951#M226550</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/237593"&gt;@michaelnorup&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;sorry I forgot the main question: which trend do you want to display?&lt;/P&gt;&lt;P&gt;In other words, with the previous search you have the used number of cores, what do you want to add to the graph?&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Tue, 29 Aug 2023 10:58:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655951#M226550</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2023-08-29T10:58:37Z</dc:date>
    </item>
    <item>
      <title>Re: Time picker not working on search/dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655954#M226552</link>
      <description>&lt;P&gt;Would love to add a trend line for the amount of cores. So its easier to see if its trending up or down (And maybe even a forecast?)&lt;/P&gt;</description>
      <pubDate>Tue, 29 Aug 2023 11:06:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-is-the-Time-picker-not-working-on-search-dashboard/m-p/655954#M226552</guid>
      <dc:creator>michaelnorup</dc:creator>
      <dc:date>2023-08-29T11:06:30Z</dc:date>
    </item>
  </channel>
</rss>

