Dashboards & Visualizations

Display PREVIOUS Month and Year in Single Value Panel in Dashboard

aferone
Builder

In relation to this post:

https://answers.splunk.com/answers/209329/how-do-i-display-the-current-date-month-and-year-i.html

How would I display the PREVIOUS month on a dashboard? I have report panels that run for the previous month, and I want to show that month and year in a single value panel above each report.

Thanks!

0 Karma
1 Solution

somesoni2
Revered Legend

Try something like this for your single value panel search

| gentimes start=-1 | eval lastmonth=strftime(relative_time(now(),"-1mon"),"%b %Y") | table lastmonth

View solution in original post

somesoni2
Revered Legend

Try something like this for your single value panel search

| gentimes start=-1 | eval lastmonth=strftime(relative_time(now(),"-1mon"),"%b %Y") | table lastmonth

aferone
Builder

Thanks! This works! It just seems to take a long time to run for some reason.

0 Karma

sbhatnagar88
Path Finder

How can i display last 6 moths starting from the current.

Jan 2019
Dec 2018
Nov 2019
Oct 2018

0 Karma

1206chandra
Explorer

Hi sbhantnagr88

| gentimes start=-6 | eval lastmonth=strftime(relative_time(now(),"-6mon"),"%b %Y") | table lastmonth

0 Karma

somesoni2
Revered Legend

Strange. These (gentimes and now() both) are one of the fastest command I've seen (auto-generating command, doesn't access any index).

0 Karma

aferone
Builder

I added |head 1, and everything is just fine.

Thanks!

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...