Dashboards & Visualizations

How to select few options under TimeRangePicker

samsplunkd
Path Finder

Hi,

Is there a way to selectively show only few options available under "TimeRangePicker" module and not all the options? Like I only want to show "Last 15 minutes", "Last 4 hours" and "Custom time..." to the user when I use "TimeRangePicker" module in my dashboard.

Any help is greatly appreciated.

Thanks

Tags (1)
0 Karma

Drainy
Champion

Sure, you can use your own custom times.conf in an app or under the search app, the docs on it are here;
http://docs.splunk.com/Documentation/Splunk/latest/admin/Timesconf

With this you can define your own custom time ranges as well as the ones you want to be displayed to your end users.

tsmithsplunk
Path Finder

I'm not sure I get it. Is it possible to define time ranges that only apply to a certain module on a certain dashboard? It appears you are disabling the default ranges for all modules wherever they may appear.

0 Karma

samsplunkd
Path Finder

Thanks.So you are saying this should work?

cat //etc/apps//local/times.conf

[last_15_mins]
label = Last 15 minutes
header_label = in the last 15 minutes
earliest_time = -15m@m
latest_time = now
order = 10

[last_60_mins]
disabled=true

[last_4_hours]
label = Last 4 hours
header_label = in the last 4 hours
earliest_time = -4h@h
latest_time = now
order = 30

[last_24_hours]
disabled=true

[last_7_days]
disabled=true

[last_30_days]
disabled=true

[other]
label = Other
is_sub_menu = True
order = 200
disabled=true

[real_time_menu]
disabled=true

[all_time]
disabled=true

0 Karma

Drainy
Champion

To make sure the default ones are disabled you can explicitly set them as disabled, e.g.
[all_time]
disabled=true

0 Karma

samsplunkd
Path Finder

Thanks for the reply. I entered my options in times.conf and copied it under my app local folder but it still uses the default times.conf with all the options. Any idea what may be wrong in what I am doing?

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...