Dashboards & Visualizations

How to select few options under TimeRangePicker

samsplunkd
Path Finder

Hi,

Is there a way to selectively show only few options available under "TimeRangePicker" module and not all the options? Like I only want to show "Last 15 minutes", "Last 4 hours" and "Custom time..." to the user when I use "TimeRangePicker" module in my dashboard.

Any help is greatly appreciated.

Thanks

Tags (1)
0 Karma

Drainy
Champion

Sure, you can use your own custom times.conf in an app or under the search app, the docs on it are here;
http://docs.splunk.com/Documentation/Splunk/latest/admin/Timesconf

With this you can define your own custom time ranges as well as the ones you want to be displayed to your end users.

tsmithsplunk
Path Finder

I'm not sure I get it. Is it possible to define time ranges that only apply to a certain module on a certain dashboard? It appears you are disabling the default ranges for all modules wherever they may appear.

0 Karma

samsplunkd
Path Finder

Thanks.So you are saying this should work?

cat //etc/apps//local/times.conf

[last_15_mins]
label = Last 15 minutes
header_label = in the last 15 minutes
earliest_time = -15m@m
latest_time = now
order = 10

[last_60_mins]
disabled=true

[last_4_hours]
label = Last 4 hours
header_label = in the last 4 hours
earliest_time = -4h@h
latest_time = now
order = 30

[last_24_hours]
disabled=true

[last_7_days]
disabled=true

[last_30_days]
disabled=true

[other]
label = Other
is_sub_menu = True
order = 200
disabled=true

[real_time_menu]
disabled=true

[all_time]
disabled=true

0 Karma

Drainy
Champion

To make sure the default ones are disabled you can explicitly set them as disabled, e.g.
[all_time]
disabled=true

0 Karma

samsplunkd
Path Finder

Thanks for the reply. I entered my options in times.conf and copied it under my app local folder but it still uses the default times.conf with all the options. Any idea what may be wrong in what I am doing?

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...