How to load a dashboard with a default time range of "month to date" in Splunk?

[snehalk]

Hello All,

I need to load a dashboard as "month to date" , I tried with below

<input type="time" searchWhenChanged="true">
  <label/>
  <default>
    <earliestTime>-30d@d</earliestTime>
    <latestTime>now</latestTime>
  </default>
</input>

But I need to load as month to date, can any one help me on this.

Thanks,
Snehal

[snehalk · Accepted solution]

Hello All

I used below time range to get "month to date" by default.

<input type="time" searchWhenChanged="true">
  <label/>
  <default>
    <earliestTime>@mon</earliestTime>
    <latestTime>now</latestTime>
  </default>
</input>

Thannks for your support

[mkemmerer]

You need to add a token to your input and apply it to the earliest Time latest Time elements for each panel. For example:

      <form>
        <input type="time" token="timefield1">
          <label>Range</label>
          <default>
            <earliestTime>-30d@d</earliestTime>
            <latestTime>now</latestTime>
          </default>
        </input>
      <row>
        <panel>
          <chart>
            <title>CPU Usage</title>
            <searchString>index=os sourcetype=performance | timechart avg(CPU) by host</searchString>
            <earliestTime>$timefield1.earliest$</earliestTime>
            <latestTime>$timefield1.latest$</latestTime>
          </chart>
        </panel>
      </row>
    </form>

[snehalk]

Hello mkemmerer,

Thanks for reply, for last month it working fine, but what I need is, it should be "month to date" by default and not "last month".

Could you please guide me on this?

Thanks
Snehal