- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Re: Dashboard not loading with default time
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dashboard not loading with default time
Hello,
My dashboard doesn't load with the default time that I've set in my shared time picker. Instead, it always loads with this one fixed time. How do I fix this issue? Please help!
Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Make sure that your search string SPL does NOT contain earliest=xxx inside of it. Doing so will always override the Timepicker and force it to its value.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Are you talking about the whole dash board or a panel within the dashboard?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Click Edit, then click on the timepicker and set the default to what you like and also set the initial value to the same thing and save that. Then move down to the panel that should be effected and click on the Magnifying Glass icon that has the hover/tooltip text of Edit search. In the popup dialog there will be a field called Time range with a button to the right. Click on that button and select Shared Time Picker (global). Click Apply, then click Save.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Done all of those. It doesn't work 😞 . Keeps going back to the previous day.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@moizmmz Check your value of <earliest> and <latest> tags for each query. It looks like it is picking default static value , instead should be the token $time.earliest$ and $time.latest$ from the time picker ( assuming the token name for your time picker is time)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I checked mate.. everything seems fine
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @moizmmz,
could you please share your config ? XML code that is.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Initally when you created the panel on your dashboard there is a "Time Range" portion of the creation process where you can select the "Shared Time Picker" there.
If you already created the panel, go into edit mode for the dashboard to edit the different panels. Click the magnifying glass on the panel and a box will open where you can select the time range for the panel.
Keep in mind this will only affect the panel that you clicked on.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I've done all of this. My dashboard doesn't open with the default time I set on it
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @moizmmz - can you give us a screen grab of your time picker settings in the panels?
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
