Dashboards & Visualizations

How to select few options under TimeRangePicker

samsplunkd
Path Finder

Hi,

Is there a way to selectively show only few options available under "TimeRangePicker" module and not all the options? Like I only want to show "Last 15 minutes", "Last 4 hours" and "Custom time..." to the user when I use "TimeRangePicker" module in my dashboard.

Any help is greatly appreciated.

Thanks

Tags (1)
0 Karma

Drainy
Champion

Sure, you can use your own custom times.conf in an app or under the search app, the docs on it are here;
http://docs.splunk.com/Documentation/Splunk/latest/admin/Timesconf

With this you can define your own custom time ranges as well as the ones you want to be displayed to your end users.

tsmithsplunk
Path Finder

I'm not sure I get it. Is it possible to define time ranges that only apply to a certain module on a certain dashboard? It appears you are disabling the default ranges for all modules wherever they may appear.

0 Karma

samsplunkd
Path Finder

Thanks.So you are saying this should work?

cat //etc/apps//local/times.conf

[last_15_mins]
label = Last 15 minutes
header_label = in the last 15 minutes
earliest_time = -15m@m
latest_time = now
order = 10

[last_60_mins]
disabled=true

[last_4_hours]
label = Last 4 hours
header_label = in the last 4 hours
earliest_time = -4h@h
latest_time = now
order = 30

[last_24_hours]
disabled=true

[last_7_days]
disabled=true

[last_30_days]
disabled=true

[other]
label = Other
is_sub_menu = True
order = 200
disabled=true

[real_time_menu]
disabled=true

[all_time]
disabled=true

0 Karma

Drainy
Champion

To make sure the default ones are disabled you can explicitly set them as disabled, e.g.
[all_time]
disabled=true

0 Karma

samsplunkd
Path Finder

Thanks for the reply. I entered my options in times.conf and copied it under my app local folder but it still uses the default times.conf with all the options. Any idea what may be wrong in what I am doing?

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...