How to enable only current few(N) days in datetimerange accordion in datetimerange picker

[basilarockiaedw]

In My Splunk Dashboard we have a requirement to disable past dates other than current date in the datettimerange picker.i know it is possible to hide and show some accordion in datetimerage picker. But have no idea on how to disable/enable certain dates.
any help on this is highly appreciated.

[woodcock · Accepted solution]

You must create this custom file:

$SPLUNK_HOME/etc/apps/YourAppHere/local/times.conf

You can copy the full one from here and pare it down:

$SPLUNK_HOME/etc/system/default/times.conf

[basilarockiaedw]

Thanks for the response!. I don't find an option to disable current day or previous day in the date menu in the times.conf which you have asked to modify though it has the ability to add or remote certain category of timepicker.

[woodcock]

https://docs.splunk.com/Documentation/Splunk/6.5.2/Admin/Timesconf