Dashboards & Visualizations

Dashboard Studio and Relative Timing Presets

splunkernator
Path Finder

Howdy Splunkers!

WARNING: NEWBIE

I was after a preset drop down, and I'm after something more 'splunkonic' on the dashboard studio.

Classic dashboards seem to come with the convenience of the relative timeset and so on: really useful.  Dashboard Studio is quite nice and after head scratching I wanted feature parity.

So to either completely substitute the queryParameters dictionary with a bunch of drop downs - or create an object like this:

"queryParameters": {
"earliest": "$query.earliest_time$",
"latest": "$query.latest_time$"
}

 
If I was using python Id create a class or just insert a dict - how is everyone else managing?  Currently I have a ealiest_time input and a latest_time input drop down and substitute he values of the keys above:
 
"queryParameters": {
"earliest": "$earliest_time$",
"latest": "$latest_time$"
}

 

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

I am not entirely sure what you are asking for - Studio already has a timepicker dropdown input - does this not satisfy your needs?

0 Karma

splunkernator
Path Finder

couldnt see where to use that so I created two drop downs and put 

 

 

Time Range
Currently using Start Time input
$earliest_time$ - $latest_time$

 

in the data definition
I can link these two variables into all graphs - couldnt find the bog standard time picker 
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...