topic Re: timepicker and real time in Splunk Search

timepicker and real time

albertohontoria — Mon, 28 Sep 2020 15:39:04 GMT

Hi friends

I am using timepicker to select a time range, and pass it to dbquery command to search the database.

But the timepicker is showing realtime menu, which is not compatible with dbquery. I want to disable it. Splunk 6.0.1

I have tried the documentation
[real_time_menu]
disabled = 1

and also

[real_time_menu]
disabled = true

with no sucess. In this version is there another way to disable it?

I also want to disable Advanced menu in datepicker.

Thanks in advance

Re: timepicker and real time

aelliott — Mon, 28 Sep 2020 15:39:15 GMT

This is the only way I found to disable realtime searches. The real_time_menu was not in the documentation that I could see (but did see it in splunk answers)
http://docs.splunk.com/Documentation/Splunk/6.0.1/Search/Restrictrealtimesearch

I also found someone else who was trying to do this as well:
http://answers.splunk.com/answers/88356/remove-real-time-from-dashboard-panel

Re: timepicker and real time

somesoni2 — Tue, 14 Jan 2014 23:59:08 GMT

I am too not able to accomplish this in Splunk 6.0.1. I even tried deleting the Realtime entries (all of them) from etc/system/default/times.conf (after creating a backup and restarted splunk).

Re: timepicker and real time

Rocket66 — Wed, 15 Jan 2014 10:14:39 GMT

The easy way ist to hide that section with CSS 🙂
Each section (Real-time, realtive, datetime, ... ) has a DOM-ID

Hide that ID with an CSS :

[hash]realtime_view6562 {
display: none;
}

the number (6562) behind "realtime_view" is dynamic - it depends on your dashbaord - you have to find it out with DOM-Tools - like "firebug" (Mozilla FF) 🙂

Re: timepicker and real time

srinathd — Wed, 29 Oct 2014 09:30:09 GMT

is the DOM-ID will always be the same for advanced menu. There are so many dashboards, it will be difficult to do for all dashboards.. is there any generic way of doing it..

Re: timepicker and real time

DaveAW — Thu, 21 Jul 2016 02:29:27 GMT

This can be done using CSS - either within a css file in your app's static folder that is referenced by your dashboard xml, or within dashboard.css to apply across all dashboards.

/* Hide Real-time Options (Splunk 6.4.1) */
.shared-timerangepicker-dialog div.accordion-group:nth-child(3),
.shared-timerangepicker-dialog-presets .presets-group:first-child,
.shared-timerangepicker-dialog-presets .presets-divider-wrap:first-child
{   
    display: none !important; 
}

Re: timepicker and real time

Rocket66 — Thu, 21 Jul 2016 11:39:14 GMT

Yes! That's more robust and versatile!