Dashboards & Visualizations

Dynamic Dropdown Timeframe

VirTechSystems
New Member

I have created a form that shows web filter events from our firewall. It shows data in the format of date, time, computer, category, page.

I have added a dynamic dropdown to the form to specify the category, but I would like the data populated in it restricted to the time selected on the form.

Here are the elements

<input type="dropdown" token="category">
<label>Category</label>
<populatingSavedSearch fieldForValue="category" fieldForLabel="category">Webfilter Categories - Blocked</populatingSavedSearch>
<choice value="*">Any</choice>
</input>

<input type="time">
<label>Time</label>
<default>Last 24 Hours</default>
</input>

I know of the attributes earliestTime and latestTime, but how do I pass the time from the input time field to the dynamic dropdown?

Thanks

Tags (3)
0 Karma
1 Solution

Richfez
SplunkTrust
SplunkTrust

I have a time input of type="time" and with token="time_picker"

So, in the XML for the dropdown in the "populatingSearch" I added

earliest="$time_picker.earliest$" latest="$time_picker.latest$"

View solution in original post

Richfez
SplunkTrust
SplunkTrust

I have a time input of type="time" and with token="time_picker"

So, in the XML for the dropdown in the "populatingSearch" I added

earliest="$time_picker.earliest$" latest="$time_picker.latest$"

Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...