Dashboards & Visualizations

Can a user change their default time range?

Ultra Champion

Can a user change their default search time range to be, let's say, five minutes and not use our default of 60 minutes?

Tags (2)
0 Karma

Esteemed Legend

No, this is not possible.

0 Karma

Influencer

Sure you can, just add something like:

dispatch.earliest_time = -15m
dispatch.latest_time = now

to the ui-prefs.conf on system/local to make it global or in /etc/users///ui-prefs.conf

[search]
dispatch.earliest_time = -15m
dispatch.latest_time = now
0 Karma

Ultra Champion

Great, but is there a way for the users to do it by themselves?

0 Karma

Influencer

No, changing the config file is the only way

0 Karma

Influencer

@ddrillic please accept an answer if it solved/helped it and upvote it. Otherwise let us know how can we help further

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!