Dashboards & Visualizations

Dynamic date range report displaying total count of several query.

KShen
New Member

I have several query. Each query I have the list of the result.

But I just need to know the report of each of the total number displayed.

For example.

And Can I generate the interactive report. The input date are: earliest and latest
the query:
1. "Error sent back from database" StatusCode NOT 00051 earliest= latest=
2. "Not a valid request object from query" earliest= latest=

After we type in or select the earliest and latest date
the report like:

error type total

Error sent back from database: 25
Not a valid request object from query: 38

Tags (1)
0 Karma

KShen
New Member

I try that on version 6.0, it is fine.

Can I create an dashboard , add a time input in Version 5.0 and add the form you posted?

I cannot figure out how to do that!

0 Karma

ngatchasandra
Builder

Hi KShen,

Is there many ways to do this!
To have a dynamic input date, you can create an dashboard and add a time input , add a panel and enter your search without put in your search earliest= latest= . Your dashboard xml code will displays like follow:

 <form>

      <label>Form with time picker</label>
      <description></description>
      <fieldset submitButton="false">


        <input type="time" searchWhenChanged="true" token="global_time_input_tok">
            <label>Select time range</label>
            <default>
              <earliest>-24h@h</earliest>
              <latest>now</latest>
            </default>
          </input>
      </fieldset>
      <row>
        <panel>
          <title>Global timer</title>
          <chart>
            <search>
              <query> Write your search </query>
              <earliest>$global_time_input_tok.earliest$</earliest>
              <latest>$global_time_input_tok.latest$</latest>
            </search>
          </chart>
        </panel>


      </row>
     </form>
0 Karma

KShen
New Member

I try that on version 6.0, it is fine.

Can I create an dashboard and add a time input in Version 5.0?

I cannot figure out how to do that!

0 Karma
Get Updates on the Splunk Community!

Cultivate Your Career Growth with Fresh Splunk Training

Growth doesn’t just happen—it’s nurtured. Like tending a garden, developing your Splunk skills takes the right ...

Introducing a Smarter Way to Discover Apps on Splunkbase

We’re excited to announce the launch of a foundational enhancement to Splunkbase: App Tiering.  Because we’ve ...

How to Send Splunk Observability Alerts to Webex teams in Minutes

As a Developer Evangelist at Splunk, my team and I are constantly tinkering with technology to explore its ...