Here is what I am trying to do. I am trying using Simplified XML, Form to select a certain host and time, that will only analyze selected day's 8:00 - 16:00 time frame data only.
I know you can do this, where I can define into search
But when I added this into my form search xml view, the app wouldnt take it.
How can I make it so that when the user select a date then it analyze for only that day's 8:00 ~ 16:00 ?
what would be the syntax for defining "every day, 8:00 ~ 16:00" in splunk?
Maybe you're not escaping the < and > characters?
<searchTemplate>... your search here ... date_hour>8 date_hour<18</searchTemplate>
If that's not it, I would post the XML in the question. I'll bet we can figure it out.