TimeRangePicker is not working on the top of a savedsearch using sideview

[royimad]

Hello,

The results doesn't change when i pick up a new value from TimeRangePicker, I'm using sideview utils. Any idea how to fix this?

The code is the below:

<view autoCancelInterval="90" isVisible="true" objectMode="SimpleDashboard" onunloadCancelJobs="true" refresh="-1" template="dashboard.html">
  <label>Web Services Trends</label>
  <module name="AccountBar" layoutPanel="appHeader"/>
  <module name="AppBar" layoutPanel="navigationHeader"/>
  <module name="SideviewUtils" layoutPanel="appHeader"/>
  <module name="Message" layoutPanel="messaging">
    <param name="filter">*</param>
    <param name="clearOnJobDispatch">False</param>
    <param name="maxSize">1</param>
  </module>
  <module name="Message" layoutPanel="messaging">
    <param name="filter">splunk.search.job</param>
    <param name="clearOnJobDispatch">True</param>
    <param name="maxSize">1</param>
  </module>
  <module name="TitleBar" layoutPanel="viewHeader">
    <param name="actionsMenuFilter">dashboard</param>
  </module>


  <module name="TimeRangePicker" layoutPanel="panel_row1_col1" autoRun="True">
    <param name="searchWhenChanged">True</param>
    <param name="selected">Last 30 days</param>  

    <module name="GenericHeader" layoutPanel="panel_row1_col1" >
      <param name="label">Online errors summary</param>
    </module>
    <module name="SavedSearch" layoutPanel="panel_row1_col1">
      <param name="name">LOG_SUMMARY_TABLE</param>

      <module name="ViewstateAdapter">
        <param name="savedSearch">LOG_SUMMARY_TABLE</param>
        <!--<module name="JobProgressIndicator" /> -->
        <module name="EnablePreview">
          <param name="enable">True</param>
          <param name="display">False</param>
        </module>
        <module name="Table">
        </module>
      </module>
    </module>
  </module>
</view>

[sideview]

If your savedsearch has a timerange, or if it's scheduled, then the timerange from the SavedSearch module will simply override the timerange from the TimeRangePicker.

Since there can be valid cases where you simply don't care that there's an upstream TimeRangePicker that you're overriding, the Sideview SavedSearch module does not actually warn you about this. The Splunk HiddenSavedSearch module on the other hand, warns you with a big red error message.

However essentially it's the same cause. You're specifying timerange twice and the deeper one wins.

[royimad · Accepted solution]

This is due to this warning i think.
link text

[sideview]

Can you also post the search language of the savedsearch? I'm interested in what kind of a search it is, and also whether the timerange is specified explicitly in the searchstring.

Also can you tell me whether this is a scheduled saved search?

Are there any blue notifications or red error messages appearing at the top of the page?