Dashboards & Visualizations

Dashboards / global time into drill down settings

mdemiranda
Observer

I have dashboards that are configured for input global_time. I also have time input dropdown. So that when I change the time all of my dashboards updates automatically. Now, through drill down setting, I am adding links to custom URL to each dashboards that will open unique Splunk search page. The problem is, I want to be able to change the hour to 4 hours instead of 24 from dashboard window, and when I click the bars on the grid for example, I would have Splunk search page that is 4 hours. And if I change the global time to 7 days I want to have search result with 7 days. I figured, I need to change the link with< &earliest=-4%40h&latest=now>  in the Link to Custom URL Drilldown settings. How I can relate the global_time to that timing?

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...