Dashboards & Visualizations

How to convert time based on selected time span token?

auaave
Communicator

Hi Guys,

I am creating a dashboard with time span token $bin$ = 1h or 1w or 1d or 1m. How can I convert the time based on the selected token? 1h - %H , 1d - %d , 1w - %V , 1m - %b

Thanks!

| search $group$
| bin _time span=$bin$ 
| eval Time=strftime(_time,"%V") 
| chart count as eventcount over DESCRIPTION by Time 
0 Karma
1 Solution

HiroshiSatoh
Champion

Is it like this?
Please add CASE.

<input type="dropdown" token="span">
  <label>XXX</label>
  <choice value="1h">1h</choice>
  <choice value="1d">1d</choice>
  <change>
    <eval token="time_format">case($span$="1h","%H",$span$="1d","%d")</eval>
  </change>
</input>

|eval Time=strftime(_time,"$time_format$")

View solution in original post

HiroshiSatoh
Champion

Is it like this?
Please add CASE.

<input type="dropdown" token="span">
  <label>XXX</label>
  <choice value="1h">1h</choice>
  <choice value="1d">1d</choice>
  <change>
    <eval token="time_format">case($span$="1h","%H",$span$="1d","%d")</eval>
  </change>
</input>

|eval Time=strftime(_time,"$time_format$")

View solution in original post

auaave
Communicator

@HiroshiSatoh, this is exactly what I need. Thanks a lot 🙂

0 Karma

p_gurav
Champion
0 Karma

auaave
Communicator

thanks @ p_gurav 🙂

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.