All Apps and Add-ons

How to pass on the selected timerange in TimeRangePicker on a drilldown?

imrago
Contributor

I have a Timerangepicker on both the originating and the target dashboards, and I use the Redirector/URLLoader modules from the SideView app to pass on parameters between the dashboard.

How could I pass on the the selected timerange from the originating dashboard to the TimeRangepicker module on the target dashboards?

1 Solution

sideview
SplunkTrust
SplunkTrust

You refer to the earliest time as $search.timeRange.earliest$ and the latest as $search.timeRange.latest$, so your Redirector should look like this:

<module name="Redirector">
  <param name="url">my_view</param>
  <param name="arg.user">$username$</param>
  <param name="arg.earliest">$search.timeRange.earliest$</param>
  <param name="arg.latest">$search.timeRange.latest$</param>
</module>

If you're using the 'template' param on your Pulldown or TextField, you'll want to use:

<param name="arg.user">$username.rawValue$</param>

instead of just $username$ -- when values are templated, $username$ will be user="bob", and to get the raw value bob, you have to use $username.rawValue$.

I'll add an example to the documentation that includes timeranges in the Redirector and a TimeRangePicker in the target view. Didnt notice the omission until now. Thanks.

View solution in original post

sideview
SplunkTrust
SplunkTrust

You refer to the earliest time as $search.timeRange.earliest$ and the latest as $search.timeRange.latest$, so your Redirector should look like this:

<module name="Redirector">
  <param name="url">my_view</param>
  <param name="arg.user">$username$</param>
  <param name="arg.earliest">$search.timeRange.earliest$</param>
  <param name="arg.latest">$search.timeRange.latest$</param>
</module>

If you're using the 'template' param on your Pulldown or TextField, you'll want to use:

<param name="arg.user">$username.rawValue$</param>

instead of just $username$ -- when values are templated, $username$ will be user="bob", and to get the raw value bob, you have to use $username.rawValue$.

I'll add an example to the documentation that includes timeranges in the Redirector and a TimeRangePicker in the target view. Didnt notice the omission until now. Thanks.

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...