Dashboards & Visualizations

Can a user change their default time range?

ddrillic
Ultra Champion

Can a user change their default search time range to be, let's say, five minutes and not use our default of 60 minutes?

Tags (2)
0 Karma

woodcock
Esteemed Legend

No, this is not possible.

0 Karma

tiagofbmm
Influencer

Sure you can, just add something like:

dispatch.earliest_time = -15m
dispatch.latest_time = now

to the ui-prefs.conf on system/local to make it global or in /etc/users///ui-prefs.conf

[search]
dispatch.earliest_time = -15m
dispatch.latest_time = now
0 Karma

ddrillic
Ultra Champion

Great, but is there a way for the users to do it by themselves?

0 Karma

tiagofbmm
Influencer

No, changing the config file is the only way

0 Karma

tiagofbmm
Influencer

@ddrillic please accept an answer if it solved/helped it and upvote it. Otherwise let us know how can we help further

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...