Dashboards & Visualizations

Dropdown for Core Hours

damo66a
Explorer

Is there any way I can use a dropdown to specify days but have it be the same time period ever day?

 

So for example, it would appear in the dropdown like:

Mon - 9am to 5pm
Tue - 9am to 5pm
Wed - 9am to 5pm
Thurs- 9am to 5pm
Fri - 9am to 5pm

and have it reference those days and times ?

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Yes (probably) - your dropdown value (not label which would be "Mon - 9am to 5pm" for example), is the value that the token will be set to when the item is selected. If you are using the token in a search, you can set it to anything that is appropriate to the search. For example, you may be able to use the date_wday and date_hour fields e.g. date_wday=monday AND date_hour>=9 AND date_hour<=5

0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...