Hi,
I'm using Time Range Picker in my dashboard. Whenever I select any particular time range, I want to increase the latest with 1 day.
i.e if selected latest is 10 Aug, then it should take it 11 Aug in the latest.
Earliest will be same.
Code:
<input type="time" searchWhenChanged="true" token="TIMEPICKER">
<label>Date</label>
<change>
<set token="STARTDATEEPOCH">$earliest$</set>
<set token="ENDDATEEPOCH">$latest$</set>
</change>
</input>
And I'm using the Time Range Picker selection as time range for Base query. I want the time range for Base query should be earliest & (latest+1day)
<search id="base">
<query>index=hvpayments sourcetype=pq | eventstats count(ID) as Count by ID</query>
<earliest>$STARTDATEEPOCH$</earliest>
<latest>$ENDDATEEPOCH$</latest>
</search>
Try this
index=xyz latest=[|gentimes start=-1 | eval search=relative_time(now(), "$timepicker.latest$")+86400 | fields search ]
I tried it... but it doesn't work the way I want it.
Hello,
You can achieve this by tweaking the required time range stanza in the times.conf file, which locates in etc/system/default.
Regards,
Faizan
Thanks for replying. But I don't want to change any configuration file. Is it possible to change within the Dashboard XML ?
Could you pls share the portion of XML so that can be tweaked?
I changed my question, and updated with the code.