Dashboards & Visualizations

Dropdown for Core Hours

damo66a
Explorer

Is there any way I can use a dropdown to specify days but have it be the same time period ever day?

 

So for example, it would appear in the dropdown like:

Mon - 9am to 5pm
Tue - 9am to 5pm
Wed - 9am to 5pm
Thurs- 9am to 5pm
Fri - 9am to 5pm

and have it reference those days and times ?

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Yes (probably) - your dropdown value (not label which would be "Mon - 9am to 5pm" for example), is the value that the token will be set to when the item is selected. If you are using the token in a search, you can set it to anything that is appropriate to the search. For example, you may be able to use the date_wday and date_hour fields e.g. date_wday=monday AND date_hour>=9 AND date_hour<=5

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...