Dashboards & Visualizations

Change metrics workspace default lookback time

brabagaza
Explorer

Hi all,
I was wondering if anyone knew of a way to reset default search time period inside the metrics workspace.

metrics_workspace1.PNG

The default seems to be an hour, which is independent of default period set in the
$SPLUNK_HOME/etc/system/local/ui-prefs.conf file which I've set to 1 day

[search]
dispatch.earliest_time = 1d@d
dispatch.latest_time = now

metrics_workspace2.PNG

options that are provided in the config in
/opt/splunk/etc/apps/splunk_metrics_workspace/README/workspace.conf.example

seem to provide a lookback option
[metadata]
earliest = -1d

but this does not affect the lookback time indicate earlier.

Also the /opt/splunk/etc/apps/splunk_metrics_workspace/README/workspace.conf.spec
option does not seems to change the default -1hour lookback

[metadata]
earliest = -1m
#* Sets how far back to query the metrics catalog.
#* Shortening this could speed up the catalog query.
#* Default: -2d (?default seems to be 1 hour)

Does not change the default time,  beyond the README folder documentation seems limited, any help is appreciated,
Roelof
@fcannon_splunk
@kvarnun_splunk

Labels (1)
0 Karma

elizabethl_splu
Splunk Employee
Splunk Employee

Hi @brabagaza  thanks for flagging this bug! We're now tracking it and plan to fix it. 

0 Karma

brabagaza
Explorer

Hi @elizabethl_splu , great to year it's being fixed, is there any place that I might be able to track the status?

Cheers

R

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...