Dashboards & Visualizations

Dynamic date range report displaying total count of several query.

KShen
New Member

I have several query. Each query I have the list of the result.

But I just need to know the report of each of the total number displayed.

For example.

And Can I generate the interactive report. The input date are: earliest and latest
the query:
1. "Error sent back from database" StatusCode NOT 00051 earliest= latest=
2. "Not a valid request object from query" earliest= latest=

After we type in or select the earliest and latest date
the report like:

error type total

Error sent back from database: 25
Not a valid request object from query: 38

Tags (1)
0 Karma

KShen
New Member

I try that on version 6.0, it is fine.

Can I create an dashboard , add a time input in Version 5.0 and add the form you posted?

I cannot figure out how to do that!

0 Karma

ngatchasandra
Builder

Hi KShen,

Is there many ways to do this!
To have a dynamic input date, you can create an dashboard and add a time input , add a panel and enter your search without put in your search earliest= latest= . Your dashboard xml code will displays like follow:

 <form>

      <label>Form with time picker</label>
      <description></description>
      <fieldset submitButton="false">


        <input type="time" searchWhenChanged="true" token="global_time_input_tok">
            <label>Select time range</label>
            <default>
              <earliest>-24h@h</earliest>
              <latest>now</latest>
            </default>
          </input>
      </fieldset>
      <row>
        <panel>
          <title>Global timer</title>
          <chart>
            <search>
              <query> Write your search </query>
              <earliest>$global_time_input_tok.earliest$</earliest>
              <latest>$global_time_input_tok.latest$</latest>
            </search>
          </chart>
        </panel>


      </row>
     </form>
0 Karma

KShen
New Member

I try that on version 6.0, it is fine.

Can I create an dashboard and add a time input in Version 5.0?

I cannot figure out how to do that!

0 Karma
Get Updates on the Splunk Community!

Enhance Your Splunk App Development: New Tools & Support

UCC FrameworkAdd-on Builder has been around for quite some time. It helps build Splunk apps faster, but it ...

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...