In My Splunk Dashboard we have a requirement to disable past dates other than current date in the datettimerange picker.i know it is possible to hide and show some accordion in datetimerage picker. But have no idea on how to disable/enable certain dates.
any help on this is highly appreciated.
You must create this custom file:
$SPLUNK_HOME/etc/apps/YourAppHere/local/times.conf
You can copy the full one from here and pare it down:
$SPLUNK_HOME/etc/system/default/times.conf
You must create this custom file:
$SPLUNK_HOME/etc/apps/YourAppHere/local/times.conf
You can copy the full one from here and pare it down:
$SPLUNK_HOME/etc/system/default/times.conf
Thanks for the response!. I don't find an option to disable current day or previous day in the date menu in the times.conf which you have asked to modify though it has the ability to add or remote certain category of timepicker.