Dashboards & Visualizations

How to set timechart span from Splunk dashboard UI?

Dahara
Engager

Hello!

I would like to have timechart span configurable from the dashboard UI (e.g. via using dropdown field values), but I am not sure, how to set it up. Any help would be much appreciated!

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

I have done it with a radio button group but a dropdown would work just as well

    <input type="radio" token="span">
      <label>Bucket size</label>
      <choice value="1d">Daily</choice>
      <choice value="1h">Hourly</choice>
      <initialValue>1d</initialValue>
      <default>1d</default>
    </input>

Also, I have used a bin command, but timechart span=$span$ would work too.

| bin _time span=$span$ 

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust

I have done it with a radio button group but a dropdown would work just as well

    <input type="radio" token="span">
      <label>Bucket size</label>
      <choice value="1d">Daily</choice>
      <choice value="1h">Hourly</choice>
      <initialValue>1d</initialValue>
      <default>1d</default>
    </input>

Also, I have used a bin command, but timechart span=$span$ would work too.

| bin _time span=$span$ 
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...