Dashboards & Visualizations

Dynamic date range report displaying total count of several query.

KShen
New Member

I have several query. Each query I have the list of the result.

But I just need to know the report of each of the total number displayed.

For example.

And Can I generate the interactive report. The input date are: earliest and latest
the query:
1. "Error sent back from database" StatusCode NOT 00051 earliest= latest=
2. "Not a valid request object from query" earliest= latest=

After we type in or select the earliest and latest date
the report like:

error type total

Error sent back from database: 25
Not a valid request object from query: 38

Tags (1)
0 Karma

KShen
New Member

I try that on version 6.0, it is fine.

Can I create an dashboard , add a time input in Version 5.0 and add the form you posted?

I cannot figure out how to do that!

0 Karma

ngatchasandra
Builder

Hi KShen,

Is there many ways to do this!
To have a dynamic input date, you can create an dashboard and add a time input , add a panel and enter your search without put in your search earliest= latest= . Your dashboard xml code will displays like follow:

 <form>

      <label>Form with time picker</label>
      <description></description>
      <fieldset submitButton="false">


        <input type="time" searchWhenChanged="true" token="global_time_input_tok">
            <label>Select time range</label>
            <default>
              <earliest>-24h@h</earliest>
              <latest>now</latest>
            </default>
          </input>
      </fieldset>
      <row>
        <panel>
          <title>Global timer</title>
          <chart>
            <search>
              <query> Write your search </query>
              <earliest>$global_time_input_tok.earliest$</earliest>
              <latest>$global_time_input_tok.latest$</latest>
            </search>
          </chart>
        </panel>


      </row>
     </form>
0 Karma

KShen
New Member

I try that on version 6.0, it is fine.

Can I create an dashboard and add a time input in Version 5.0?

I cannot figure out how to do that!

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...