Dashboards & Visualizations

How to display labels of the custom time range picker in the dashboard?

damucka
Builder

Hello,

I have a custom time range picker, which I defined in the local times.conf of my app:

/opt/splunkdev2/splunk/etc/apps/FRUN/local/times.conf:

...

[EVENT_20220819]
header_label = UPG
label = 2208
earliest_time = 20220819
latest_time = 20230217
order = 501

...

It works kind of okay, but I am not getting my label displayed when I pick the time in the dashboard, it gets translated to the date:

when I choose from the picker:

damucka_0-1674214530986.png

I will get displayed in the dashboard:

damucka_1-1674214581126.png

What do I do wrong?

 

The second question would be, if there is a way to set the default of the time picker based on the dynamic fetch from the times.conf. The point is that I am updating the times.conf on daily basis at os level with crontab, then refresh the conf-times entity for the time ranges to appear in the picker. This works fine, but with the new ranges coming, I would like also to change the default for the picker in my dashboard (e.g. setting it to last time range event, being last software upgrade for instance).

And the last question would be, if there is any way to make these time ranges visible only in my particular dashboard. I have set it on the App-Level, but the app has many dashboards and I do not need them there. It confuses the users. Or at least club them is a separate category like Presets2 (e.g. SoftwareUpgrades).

Labels (2)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...