Splunk Search

time range picker in Splunk 6.1.3 build 220630

Norling80
Path Finder

Hi, I´m trying to get the Time range picker to work in a test dashboards and in some cases it does work but not when I choose a manuel time under the Date & Time Range section.

Each element in the dashboard had already the predefined earliest/latest time from the original search that was saved to the dashboard in the first place, I guess they I need to change those.

The dashboard automatically added this when I added the TimePicker from the GUI:

  <label />
  <default>
    <earliestTime>0</earliestTime>
    <latestTime />
  </default>
</input>

any ides what I need to change to make it work?
/magnus

Tags (1)

jdwest1
Explorer

Time range picker is global if token is not defined.
Global time range picker is overridden by specific searches having declared time frames, either in xml or in the search string.
Being that you said all of your searches have those declared and the default is to include a token from the add input, It is an unused variable at the moment.

edit: I have the time range picker working in a global capacity by deleting the token="token" property and deleting any earilestTime and latestTime properties under and in a given search.
edit2: Below is for using the token.

<earliestTime>$local_time_pick.earliest$</earliestTime>
<latestTime>$local_time_pick.latest$</latestTime>

This got it working!

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...