<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic user defined search time in a dashboard in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90044#M23094</link>
    <description>&lt;P&gt;I'm busy designing dashboards. I really like the ability to specify the time window which appears in the search app. Is there any way to add similar functionality to a dashboard? I imagine there would be some button or text box in the dashboard to let you set the time range. &lt;/P&gt;</description>
    <pubDate>Tue, 09 Jul 2013 20:50:17 GMT</pubDate>
    <dc:creator>jalfrey</dc:creator>
    <dc:date>2013-07-09T20:50:17Z</dc:date>
    <item>
      <title>user defined search time in a dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90044#M23094</link>
      <description>&lt;P&gt;I'm busy designing dashboards. I really like the ability to specify the time window which appears in the search app. Is there any way to add similar functionality to a dashboard? I imagine there would be some button or text box in the dashboard to let you set the time range. &lt;/P&gt;</description>
      <pubDate>Tue, 09 Jul 2013 20:50:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90044#M23094</guid>
      <dc:creator>jalfrey</dc:creator>
      <dc:date>2013-07-09T20:50:17Z</dc:date>
    </item>
    <item>
      <title>Re: user defined search time in a dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90045#M23095</link>
      <description>&lt;P&gt;yes there is It's our friendly TimeRangePicker Module. Put the content in that module and make it available for manual time selection. Thanks!!&lt;/P&gt;</description>
      <pubDate>Tue, 09 Jul 2013 21:01:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90045#M23095</guid>
      <dc:creator>linu1988</dc:creator>
      <dc:date>2013-07-09T21:01:53Z</dc:date>
    </item>
    <item>
      <title>Re: user defined search time in a dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90046#M23096</link>
      <description>&lt;P&gt;I found this article &lt;A href="http://splunk-base.splunk.com/answers/84697/how-to-set-timerangepicker-as-realtime-by-default" target="_blank"&gt;http://splunk-base.splunk.com/answers/84697/how-to-set-timerangepicker-as-realtime-by-default&lt;/A&gt;&lt;BR /&gt;
So I edited one of my dashboard.xml files and added the following lines:&lt;/P&gt;

&lt;P&gt;&lt;ROW&gt;&lt;BR /&gt;
    &lt;TABLE&gt;&lt;BR /&gt;
      &lt;MODULE name="TimeRangePicker"&gt;&lt;BR /&gt;
        &lt;OBJECT&gt;&lt;PARAM name="selected" /&gt;last_30_days&lt;BR /&gt;
      &lt;/OBJECT&gt;&lt;/MODULE&gt;&lt;BR /&gt;
    &lt;/TABLE&gt;&lt;BR /&gt;
  &lt;/ROW&gt;&lt;/P&gt;

&lt;P&gt;I get an empty spot where the control should be. What's wrong?&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 14:17:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90046#M23096</guid>
      <dc:creator>jalfrey</dc:creator>
      <dc:date>2020-09-28T14:17:32Z</dc:date>
    </item>
    <item>
      <title>Re: user defined search time in a dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90047#M23097</link>
      <description>&lt;P&gt;You cant use the module element in the simple dashboard xml.  You can create a form view and add a TimePicker. But you'll have to create the XML with a form root element from scratch. There is no editor for a form view.   &lt;/P&gt;

&lt;P&gt;See ....  &lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/Viz/Buildandeditforms"&gt;http://docs.splunk.com/Documentation/Splunk/latest/Viz/Buildandeditforms&lt;/A&gt;  &lt;/P&gt;

&lt;P&gt;Alternatively you can convert your dashboard to Advanced XML and then use the module element. This is also documented at the link above.&lt;/P&gt;</description>
      <pubDate>Wed, 10 Jul 2013 00:12:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90047#M23097</guid>
      <dc:creator>rroberts</dc:creator>
      <dc:date>2013-07-10T00:12:29Z</dc:date>
    </item>
    <item>
      <title>Re: user defined search time in a dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90048#M23098</link>
      <description>&lt;P&gt;Ok this is a advanced xml command. It may not work in simple xml. I haven't worked in simple xml to tell you what will work in there.&lt;/P&gt;</description>
      <pubDate>Wed, 10 Jul 2013 08:56:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90048#M23098</guid>
      <dc:creator>linu1988</dc:creator>
      <dc:date>2013-07-10T08:56:36Z</dc:date>
    </item>
    <item>
      <title>Re: user defined search time in a dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90049#M23099</link>
      <description>&lt;P&gt;Please refer this article&lt;BR /&gt;
&lt;A href="http://splunk-base.splunk.com/answers/3814/real-time-option-in-time-range-picker-for-simple-xml"&gt;http://splunk-base.splunk.com/answers/3814/real-time-option-in-time-range-picker-for-simple-xml&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;seems like &lt;INPUT type="time" /&gt; will do well.&lt;/P&gt;</description>
      <pubDate>Wed, 10 Jul 2013 08:59:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90049#M23099</guid>
      <dc:creator>linu1988</dc:creator>
      <dc:date>2013-07-10T08:59:06Z</dc:date>
    </item>
    <item>
      <title>Re: user defined search time in a dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90050#M23100</link>
      <description>&lt;P&gt;I think my mistake was putting the picker on the simple xml page. I'll try to get it working in the complex xml&lt;/P&gt;</description>
      <pubDate>Wed, 10 Jul 2013 21:00:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/user-defined-search-time-in-a-dashboard/m-p/90050#M23100</guid>
      <dc:creator>jalfrey</dc:creator>
      <dc:date>2013-07-10T21:00:38Z</dc:date>
    </item>
  </channel>
</rss>

