Dashboards & Visualizations

Dynamic date range report displaying total count of several query.

KShen
New Member

I have several query. Each query I have the list of the result.

But I just need to know the report of each of the total number displayed.

For example.

And Can I generate the interactive report. The input date are: earliest and latest
the query:
1. "Error sent back from database" StatusCode NOT 00051 earliest= latest=
2. "Not a valid request object from query" earliest= latest=

After we type in or select the earliest and latest date
the report like:

error type total

Error sent back from database: 25
Not a valid request object from query: 38

Tags (1)
0 Karma

KShen
New Member

I try that on version 6.0, it is fine.

Can I create an dashboard , add a time input in Version 5.0 and add the form you posted?

I cannot figure out how to do that!

0 Karma

ngatchasandra
Builder

Hi KShen,

Is there many ways to do this!
To have a dynamic input date, you can create an dashboard and add a time input , add a panel and enter your search without put in your search earliest= latest= . Your dashboard xml code will displays like follow:

 <form>

      <label>Form with time picker</label>
      <description></description>
      <fieldset submitButton="false">


        <input type="time" searchWhenChanged="true" token="global_time_input_tok">
            <label>Select time range</label>
            <default>
              <earliest>-24h@h</earliest>
              <latest>now</latest>
            </default>
          </input>
      </fieldset>
      <row>
        <panel>
          <title>Global timer</title>
          <chart>
            <search>
              <query> Write your search </query>
              <earliest>$global_time_input_tok.earliest$</earliest>
              <latest>$global_time_input_tok.latest$</latest>
            </search>
          </chart>
        </panel>


      </row>
     </form>
0 Karma

KShen
New Member

I try that on version 6.0, it is fine.

Can I create an dashboard and add a time input in Version 5.0?

I cannot figure out how to do that!

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...