Example wanted for view xml, adding the time picker

[jangid]

Is there any example for where I can set and get the time value in form based dashboard?

Thanks

[rroberts · Accepted solution]

Yes, see:

http://docs.splunk.com/Documentation/Splunk/latest/Developer/Step2CustomizeForm

Specify Time range picker

[jangid]

Transfer sourcetype="LOG_LINE" TXN.ID | table _time TransactionID | streamstats range(_time) as ElapsedTime by TransactionID | where ElapsedTime > 0

Last 4 Hours

[rroberts]

Can you please put the entire XML here?

[jangid]

Thanks

This always display 30 days 😞

is there any way to override this behavior?

my code

Last 4 Hours

or am I doing something wrong?