Dashboards & Visualizations

How can i set time input , where the user write start time (d/m/yy) and end time (d/m/yy) ?

tinpelayee
Engager

Hello plp i am trying to do a xml , where a user set a start time (writing in a box) them the end time, and those 2 time tokens send to a query to search in that range time. Any clue about this? Thanks!!

0 Karma

richgalloway
SplunkTrust
SplunkTrust

I take it you have a dashboard with two input boxes and you need to convert the user's text input into timestamps. If that's not right, please clarify the question.

You can do that using the strptime function.

... | eval start = strptime(startToken, "%d/%m/%y"), end = strptime(endToken, "%d/%m/%y") | ...
---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...