Dashboards & Visualizations

Dynamic date range report displaying total count of several query.

KShen
New Member

I have several query. Each query I have the list of the result.

But I just need to know the report of each of the total number displayed.

For example.

And Can I generate the interactive report. The input date are: earliest and latest
the query:
1. "Error sent back from database" StatusCode NOT 00051 earliest= latest=
2. "Not a valid request object from query" earliest= latest=

After we type in or select the earliest and latest date
the report like:

error type total

Error sent back from database: 25
Not a valid request object from query: 38

Tags (1)
0 Karma

KShen
New Member

I try that on version 6.0, it is fine.

Can I create an dashboard , add a time input in Version 5.0 and add the form you posted?

I cannot figure out how to do that!

0 Karma

ngatchasandra
Builder

Hi KShen,

Is there many ways to do this!
To have a dynamic input date, you can create an dashboard and add a time input , add a panel and enter your search without put in your search earliest= latest= . Your dashboard xml code will displays like follow:

 <form>

      <label>Form with time picker</label>
      <description></description>
      <fieldset submitButton="false">


        <input type="time" searchWhenChanged="true" token="global_time_input_tok">
            <label>Select time range</label>
            <default>
              <earliest>-24h@h</earliest>
              <latest>now</latest>
            </default>
          </input>
      </fieldset>
      <row>
        <panel>
          <title>Global timer</title>
          <chart>
            <search>
              <query> Write your search </query>
              <earliest>$global_time_input_tok.earliest$</earliest>
              <latest>$global_time_input_tok.latest$</latest>
            </search>
          </chart>
        </panel>


      </row>
     </form>
0 Karma

KShen
New Member

I try that on version 6.0, it is fine.

Can I create an dashboard and add a time input in Version 5.0?

I cannot figure out how to do that!

0 Karma
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...