https://community.splunk.com/t5/Splunk-Search/timechart-span-in-saved-search/m-p/108702#M28325 <P>You may use the savedsearch function:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/Savedsearch">http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/Savedsearch</A></P> Mon, 01 Aug 2016 17:51:41 GMT landen99 2016-08-01T17:51:41Z https://community.splunk.com/t5/Splunk-Search/timechart-span-in-saved-search/m-p/108700#M28323 <P>Is there a way to pass a timechart span variable to a saved search being called from a drop down? Is there a way to pass it strictly through the xml?</P> Mon, 29 Jul 2013 15:03:09 GMT https://community.splunk.com/t5/Splunk-Search/timechart-span-in-saved-search/m-p/108700#M28323 aaronkorn 2013-07-29T15:03:09Z https://community.splunk.com/t5/Splunk-Search/timechart-span-in-saved-search/m-p/108701#M28324 <P>No. If you are using a saved search you can't pass variables to it.</P> <P>However, if you convert the saved search to a macro, then call the macro from your xml with a Search module rather than a SavedSearch module you get the behavior that you are looking for.</P> Mon, 29 Jul 2013 18:59:26 GMT https://community.splunk.com/t5/Splunk-Search/timechart-span-in-saved-search/m-p/108701#M28324 aholzer 2013-07-29T18:59:26Z https://community.splunk.com/t5/Splunk-Search/timechart-span-in-saved-search/m-p/108702#M28325 <P>You may use the savedsearch function:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/Savedsearch">http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/Savedsearch</A></P> Mon, 01 Aug 2016 17:51:41 GMT https://community.splunk.com/t5/Splunk-Search/timechart-span-in-saved-search/m-p/108702#M28325 landen99 2016-08-01T17:51:41Z