Dashboards & Visualizations

Get preset values as specific date

karthi25
Path Finder

I have a time dropdown as below:

 <input type="time" token="dashboardTime" searchWhenChanged="true">
        <label>SELECT TIME RANGE</label>
        <default>
          <earliest>-7d@d</earliest>
          <latest>now</latest>
        </default>
      </input>

Now , I need write a query based field which was under the selected time . For Eg: If I choose Last 7 days it should be:

index=**** sourcetype=**** "cf_foundation=px-npe01" "cf_org_name=****" "cf_space_name=****" "cf_app_name=****" "||splunk-logger||" taskName='****' status='COMPLETED' | sort -splunkLogId  | eval startDateModified= strptime( startDate, "%d-%m-%Y") 
 | where startDateModified > "01/02/2018" and starDate <=  "07/02/208"|stats count
0 Karma

cmerriman
Super Champion

it looks like startDateModified is based on startDate, so the values would be the same, but formatted differently? Is there a reason you're using both in the where statement? Are the values different than _time?

0 Karma
Get Updates on the Splunk Community!

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

[Puzzles] Solve, Learn, Repeat: Nested loops in Event Conversion

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...