I'm trying to overload an existing dashboard, so that it could generate regardless if the drilldown parameter exists or not.
I want the dashboard to work even if I didn't pass $pTimeAgo$ in the URL. Currently, it will show as "Search is waiting for input...", if the parameter value is not present.
[|stats c | addinfo | eval earliest=info_min_time-$p_Time_Ago$| eval latest=info_max_time-$p_Time_Ago$ | return earliest latest]
If you are using Splunk 6.5, this is now supported natively in Simple XML.
Reference # Set tokens on page load
Thanks! I'm on 6.4.1.
Is there any other way to get around it for older version?